VYPR
← All advisories
Medium severity6.5NVD Advisory· Published May 4, 2022· Updated Jun 17, 2026

CVE-2022-29942

CVE-2022-29942

Description

Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Qlik/Talend Administration Center5 versions
    cpe:2.3:a:talend:administration_center:7.2.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:talend:administration_center:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:talend:administration_center:7.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:talend:administration_center:8.0.0:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 8.0.x, 7.3.x, 7.2.x

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.