CVE-2022-31648

Опубликовано: 26 мая 2022

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

Ссылки

https://talend.com
Vendor Advisory
https://www.talend.com/security/incident-response/#CVE-2022-31648
Vendor Advisory
https://talend.com
Vendor Advisory
https://www.talend.com/security/incident-response/#CVE-2022-31648
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:talend:administration_center:7.2.0:*:*:*:*:*:*:*

cpe:2.3:a:talend:administration_center:7.3.0:*:*:*:*:*:*:*

cpe:2.3:a:talend:administration_center:8.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00458

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qcf2-p96q-859w