10 matches found
CVE-2021-30211
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting XSS. An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter...
CVE-2021-30214
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
CVE-2021-30214
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
CVE-2021-30211
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting XSS. An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter...
CVE-2021-30214
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
PT-2021-18665
Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.3 Description The issue concerns Stored Cross-Site Scripting XSS, where an attacker can inject arbitrary web script in the "/knowage/restful-services/signup/update" API endpoint via the surname parameter. This allows fo...
CVE-2021-30211: Improper Neutralization of Input During Web Page Generation
Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting XSS. An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter...
CVE-2021-30214: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter...
PT-2021-18668
Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.3 Description The issue concerns Stored Client-Side Template Injection. It affects the '/knowage/restful-services/signup/update' endpoint via the name parameter. Recommendations For Knowage Suite version 7.3, consider...
Knowage 注入漏洞
Knowage is an open source suite for modern business analytics on traditional resources and big data systems from Knowage Italy. A security vulnerability exists in Knowage Suite version 7.3. The vulnerability stems from the program's tendency to store client templates in...