CVE-2021-42837: Talend Data Catalog

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authentication is not correctly enforced on the native login page. Any valid user from the SAML/OAuth provider can be used as the username with an arbitrary password, and login will succeed.

Affected products

• Talend Data Catalog: before 7.3-20210930 (fixed in 7.3-20210930)

Published 2021-11-05. Last modified 2026-06-17.