CVE-2021-30055

2021-04-0511:15:11

Google

osv.dev

sql injection

knowage suite

version 7.1

documentexecution

url analytics driver

par_year parameter

report

software

AI Score

7.9

Confidence

Low

EPSS

0.001

Percentile

44.7%

JSON

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the ‘par_year’ parameter when running a report.

References

github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md