Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-29942

Опубликовано: 04 мая 2022
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:talend:administration_center:7.2.0:*:*:*:*:*:*:*
cpe:2.3:a:talend:administration_center:7.3.0:*:*:*:*:*:*:*
cpe:2.3:a:talend:administration_center:8.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 41%
0.00187
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.5
github
больше 3 лет назад

Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

EPSS

Процентиль: 41%
0.00187
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-918