Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201. Earlier versions of Talend Administration Center may also be impacted; users are encouraged to update to a supported version.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Talend Administration Center 代码问题漏洞
Vulnerability Description
Talend Administration Center是Talend公司的一个基于 Web 的应用程序,可集中管理工作室。 Talend Administration Center存在安全漏洞,该漏洞源于使用服务注册表“Add”功能对内部网络中的URL执行跨站请求伪造的HTTP GET请求。
CVSS Information
N/A
Vulnerability Type
N/A