What’s Vulnerable › Vulnerabilities

CVE-2022-30332

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-10 · updated 2026-06-17
• Weakness: CWE-203

Description

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of requests.

Affected products

• Talend Administration Center: 7.3.1

References

• https://cds.thalesgroup.com/en/tcs-cert/CVE-2022-30332
• https://cwe.mitre.org/data/definitions/204.html
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-30332
• https://help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw
• https://cwe.mitre.org/data/definitions/204.html
• https://excellium-services.com/cert-xlm-advisory/CVE-2022-30332
• https://help.talend.com/r/62tbPt7y~tPTxAB7y7KpeQ/H45WqEF32geNEZiGJnRwmw

Get alerted when CVE-2022-30332 or the next vulnerability affects your stack