Talend Administration Center is vulnerable to a reflected Cross-Site Scripting (XSS) issue in the SSO login endpoint. The issue is fixed for versions 8.0.x in TPS-5233, for versions 7.3.x in TPS-5324, and for versions 7.2.x in TPS-5235. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
References
Link | Resource |
---|---|
https://talend.com | Vendor Advisory |
https://www.talend.com/security/incident-response/#CVE-2022-31648 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-05-26 13:15
Updated : 2022-06-08 09:06
NVD link : CVE-2022-31648
Mitre link : CVE-2022-31648
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
talend
- administration_center