CVE-2022-30332

5.3 mediumEPSS 0.9%

Medium (5.3) in talend administration center. EPSS 0.9% chance of exploitation in the next 30 days.

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2023-01-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

talend:administration_center

References

https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-30332
https://cwe.mitre.org/data/definitions/204.html
https://excellium-services.com/cert-xlm-advisory/CVE-2022-30332
https://help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw
https://cwe.mitre.org/data/definitions/204.html

Check your stack JSON