CVE-2021-45096

KNIME Analytics Platform (KNIME) is affected by CVE-2021-45096: versions prior to 4.5.0 are vulnerable to XXE (external XML entity injection) via crafted workflow files (.knwf). The root cause is an XXE vulnerability in processing knwf workflows, enabling an attacker to inject external entities. ...