CVE-2022-29943

Опубликовано: 04 мая 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 6.8

EPSS Низкий

Описание

Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity (XXE) processing to achieve read access as root on the remote filesystem. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

Ссылки

https://Talend.com
Vendor Advisory
https://www.talend.com/security/incident-response/#CVE-2022-29942
Vendor Advisory
https://Talend.com
Vendor Advisory
https://www.talend.com/security/incident-response/#CVE-2022-29942
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:talend:administration_center:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:talend:administration_center:7.3.0:*:*:*:*:*:*:*

cpe:2.3:a:talend:administration_center:8.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00341

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-h9gx-cvw7-jf96