CVE-2021-30055

2021-04-0510:45:58

mitre

www.cve.org

sql injection

knowage suite

documentexecution

url analytics driver

vulnerability

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

44.7%

JSON

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the ‘par_year’ parameter when running a report.

References

github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md