CVE-2022-30332

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...

CVE-2022-30332

Talend Administration Center 7.3.1.20200219 before TAC-15950 is affected. The vulnerability arises from the Forgot Password flow, which reveals different error messages depending on whether the email is linked to an account, enabling remote account enumeration. The in-scope impact is user enumera...