{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-47629", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2023-11-07T16:57:49.244Z", "datePublished": "2023-11-14T00:32:12.079Z", "dateUpdated": "2024-09-03T14:41:13.540Z"}, "containers": {"cna": {"title": "Privilege escalation through email sign-up in datahub", "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "lang": "en", "description": "CWE-269: Improper Privilege Management", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8"}], "affected": [{"vendor": "datahub-project", "product": "datahub", "versions": [{"version": "< 0.12.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-11-14T00:32:12.079Z"}, "descriptions": [{"lang": "en", "value": "DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restrict users from signing up as privileged accounts. If a user is given an email sign-up link they can potentially create an admin account given certain preconditions. If the default datahub user has been removed, then the user can sign up for an account that leverages the default policies giving admin privileges to the datahub user. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability."}], "source": {"advisory": "GHSA-vj59-23ww-p6c8", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T21:16:42.096Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-03T14:40:48.214039Z", "id": "CVE-2023-47629", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-03T14:41:13.540Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8", "name": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8", "tags": ["x_refsource_CONFIRM", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T21:16:42.096Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-47629", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-03T14:40:48.214039Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-03T14:41:03.703Z"}}], "cna": {"title": "Privilege escalation through email sign-up in datahub", "source": {"advisory": "GHSA-vj59-23ww-p6c8", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "datahub-project", "product": "datahub", "versions": [{"status": "affected", "version": "< 0.12.1"}]}], "references": [{"url": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8", "name": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restrict users from signing up as privileged accounts. If a user is given an email sign-up link they can potentially create an admin account given certain preconditions. If the default datahub user has been removed, then the user can sign up for an account that leverages the default policies giving admin privileges to the datahub user. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269: Improper Privilege Management"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-11-14T00:32:12.079Z"}}}, "cveMetadata": {"cveId": "CVE-2023-47629", "state": "PUBLISHED", "dateUpdated": "2024-09-03T14:41:13.540Z", "dateReserved": "2023-11-07T16:57:49.244Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2023-11-14T00:32:12.079Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:datahub_project:datahub:*:*:*:*:*:*:*:*", "matchCriteriaId": "A45A340B-5E00-4E48-A37F-71C11DDAAFF1", "versionEndExcluding": "0.12.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restrict users from signing up as privileged accounts. If a user is given an email sign-up link they can potentially create an admin account given certain preconditions. If the default datahub user has been removed, then the user can sign up for an account that leverages the default policies giving admin privileges to the datahub user. All DataHub instances prior to the patch that have removed the datahub user, but not the default policies applying to that user are affected. Users are advised to update to version 0.12.1 which addresses the issue. There are no known workarounds for this vulnerability."}, {"lang": "es", "value": "DataHub es una plataforma de metadatos de c\u00f3digo abierto. En las versiones afectadas, el registro a trav\u00e9s de un enlace de invitaci\u00f3n no restringe adecuadamente que los usuarios se registren como cuentas privilegiadas. Si un usuario recibe un enlace de registro de correo electr\u00f3nico, potencialmente puede crear una cuenta de administrador dadas ciertas condiciones previas. Si se elimin\u00f3 el usuario predeterminado del centro de datos, entonces el usuario puede registrarse para obtener una cuenta que aproveche las pol\u00edticas predeterminadas que otorgan privilegios de administrador al usuario del centro de datos. Todas las instancias de DataHub anteriores al parche que eliminaron al usuario de DataHub, pero no las pol\u00edticas predeterminadas que se aplican a ese usuario, se ven afectadas. Se recomienda a los usuarios que actualicen a la versi\u00f3n 0.12.1, que soluciona el problema. No se conocen workarounds para esta vulnerabilidad."}], "id": "CVE-2023-47629", "lastModified": "2024-11-21T08:30:33.867", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-11-14T01:15:08.350", "references": [{"source": "[email protected]", "tags": ["Third Party Advisory"], "url": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://github.com/datahub-project/datahub/security/advisories/GHSA-vj59-23ww-p6c8"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "[email protected]", "type": "Secondary"}]}

{}