CVE-2021-30057

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

Design/Logic Flaw

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

CVE-2021-30057: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters...

PT-2021-18590

Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.1 Description A stored HTML injection issue exists, allowing an attacker to inject arbitrary HTML in the "/restful-services/2.0/analyticalDrivers" API endpoint via the LABEL and NAME parameters. Recommendations For...

CVE-2018-12354

Knowage formerly SpagoBI 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request...

CVE-2018-12354: Cross-Site Request Forgery (CSRF)

Knowage formerly SpagoBI 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request...

PT-2018-11139

Name of the Vulnerable Software and Affected Versions Knowage formerly SpagoBI version 6.1.1 Description The issue allows for CSRF via every form. This can be demonstrated by a POST request to the "knowage/restful-services/2.0/analyticalDrivers/" endpoint. Recommendations For Knowage formerly...