CVE-2022-29943

CVE-2022-29943 (Talend Administration Center) and CVE-2022-29942 describe authenticated vulnerabilities in Talend Administration Center. The CVE-29943 issue allows XML External Entity (XXE) processing that can read the remote filesystem as root; a separate CVE-29942 concerns SSRF via the Service ...

CVE-2022-29942

Talend Administration Center {CVE-2022-29942} is a SSRF vulnerability: an authenticated user can use the Service Registry 'Add' function to perform HTTP GETs to internal-network URLs. The issue is fixed in 8.0.x (TPS-5189), 7.3.x (TPS-5175), and 7.2.x (TPS-5201); earlier versions may be affected....

CVE-2022-31648

Talend Administration Center has a reflected XSS vulnerability in the SSO login endpoint (CVE-2022-31648). Fixed in 8.0.x (TPS-5233), 7.3.x (TPS-5324), and 7.2.x (TPS-5235). Earlier versions may be affected; update to a supported version to mitigate.

CVE-2022-30332

Talend Administration Center 7.3.1.20200219 before TAC-15950 is affected. The vulnerability arises from the Forgot Password flow, which reveals different error messages depending on whether the email is linked to an account, enabling remote account enumeration. The in-scope impact is user enumera...