10 matches found
CVE-2021-30214
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
CVE-2021-30211
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting XSS. An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter...
CVE-2021-30211
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting XSS. An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter...
CVE-2021-30214
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
CVE-2021-30214
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
CVE-2021-30214: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
Knowage injection vulnerability
Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A security vulnerability exists in Knowage Suite version 7.3. The vulnerability stems from the program's tendency to store client templates in...
PT-2021-18668
Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.3 Description The issue concerns Stored Client-Side Template Injection. It affects the '/knowage/restful-services/signup/update' endpoint via the name parameter. Recommendations For Knowage Suite version 7.3, consider...
PT-2021-18665
Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.3 Description The issue concerns Stored Cross-Site Scripting XSS, where an attacker can inject arbitrary web script in the "/knowage/restful-services/signup/update" API endpoint via the surname parameter. This allows fo...
CVE-2021-30211: Improper Neutralization of Input During Web Page Generation
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting XSS. An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter...