Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
References
| Link | Resource |
|---|---|
| https://Talend.com | Vendor Advisory |
| https://www.talend.com/security/incident-response/#CVE-2022-29942 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 May 2022, 17:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:talend:administration_center:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:talend:administration_center:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:talend:administration_center:7.2.0:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.talend.com/security/incident-response/#CVE-2022-29942 - Vendor Advisory | |
| References | (MISC) https://Talend.com - Vendor Advisory | |
| First Time |
Talend administration Center
Talend |
|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 6.5 |
| CWE | CWE-918 |
04 May 2022, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-05-04 18:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-29942
Mitre link : CVE-2022-29942
CVE.ORG link : CVE-2022-29942
JSON object : View
Products Affected
talend
- administration_center
CWE
CWE-918
Server-Side Request Forgery (SSRF)