CVE-2021-44725

KNIME Server before 4.13.4 allows directory traversal in a request for a client profile...

PT-2021-24156 · Knime · Knime Server

Name of the Vulnerable Software and Affected Versions: KNIME Server versions prior to 4.13.4 Description: The issue allows for XSS via the old WebPortal login page. Recommendations: For versions prior to 4.13.4, update to version 4.13.4 or later to resolve the issue...