VYPR
← All advisories
Unrated severityNVD Advisory· Published May 4, 2022· Updated Aug 3, 2024

CVE-2022-29942

CVE-2022-29942

Description

Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Qlik/Talend Administration Centercpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <8.0.x (fixed in TPS-5189), <7.3.x (fixed in TPS-5175), <7.2.x (fixed in TPS-5201)

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.