CVE-2022-44748

🗓️ 24 Nov 2022 06:36:23Reported by KNIMEType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 47 Views

A directory traversal vulnerability in KNIME Server ZIP archive extraction can result in arbitrary files being overwritten. This can lead to data integrity impact, errors in other software, and potential remote code execution

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-44748	24 Nov 202212:24	–	circl
CNNVD	Knime Server 路径遍历漏洞	24 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-44748 Uploading workflows to KNIME Server may override arbitrary file system contents	24 Nov 202206:36	–	cvelist
EUVD	EUVD-2022-47680	3 Oct 202520:07	–	euvd
NVD	CVE-2022-44748	24 Nov 202207:15	–	nvd
Prion	Directory traversal	24 Nov 202207:15	–	prion
Positive Technologies	PT-2022-27298 · Knime · Knime Server	24 Nov 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-44748 Uploading workflows to KNIME Server may override arbitrary file system contents	24 Nov 202206:36	–	vulnrichment

NVD

Node

knime knime_serverRange4.3.0–4.13.6

knime knime_serverRange4.14.0–4.14.3

knime knime_serverRange4.15.0–4.15.3

[
  {
    "defaultStatus": "unaffected",
    "product": "KNIME Server",
    "vendor": "KNIME",
    "versions": [
      {
        "lessThan": "4.15.3",
        "status": "affected",
        "version": "4.15.0",
        "versionType": "semver"
      },
      {
        "lessThan": "4.14.3",
        "status": "affected",
        "version": "4.14.0",
        "versionType": "semver"
      },
      {
        "lessThan": "4.13.6",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "semver"
      }
    ]
  }
]