CVE-2022-44749

🗓️ 24 Nov 2022 06:39:22Reported by KNIMEType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 76 Views

Directory traversal in KNIME Analytics Platform can overwrite user file

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-44749	24 Nov 202212:24	–	circl
CNNVD	Knime Analytics Platform 路径遍历漏洞	24 Nov 202200:00	–	cnnvd
Cvelist	CVE-2022-44749 Opening workflows from untrusted resources may override arbitrary file system contents	24 Nov 202206:39	–	cvelist
EUVD	EUVD-2022-47681	3 Oct 202520:07	–	euvd
Mend	CVE-2022-44749	24 Nov 202206:39	–	mend
NVD	CVE-2022-44749	24 Nov 202207:15	–	nvd
OSV	CVE-2022-44749	24 Nov 202207:15	–	osv
Prion	Directory traversal	24 Nov 202207:15	–	prion
Positive Technologies	PT-2022-27299 · Knime · Knime Analytics Platform	24 Nov 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-44749: Improper Limitation of a Pathname to a Restricted Directory	24 Nov 202200:00	–	rapid7

NVD

Node

knime knime_analytics_platformRange3.2.0–4.6.4

[
  {
    "defaultStatus": "unaffected",
    "product": "KNIME Analytics Platform",
    "vendor": "KNIME",
    "versions": [
      {
        "lessThan": "4.5.3",
        "status": "affected",
        "version": "4.5.0",
        "versionType": "semver"
      },
      {
        "lessThan": "4.6.4",
        "status": "affected",
        "version": "4.6.0",
        "versionType": "semver"
      },
      {
        "lessThan": "4.4.5",
        "status": "affected",
        "version": "3.2.0",
        "versionType": "semver"
      }
    ]
  }
]