CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-57971
https://notcve.org/view.php?id=CVE-2024-57971
16 Feb 2025 — DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name. • https://github.com/KnowageLabs/Knowage-Server/commit/f7d0362f737e1b0db1cc9cc95b1236d62d83dd0c • CWE-99: Improper Control of Resource Identifiers ('Resource Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2CVE-2024-54792 – SpagoBI 3.5.1 Cross Site Request Forgery
https://notcve.org/view.php?id=CVE-2024-54792
21 Jan 2025 — A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users. SpagoBI versions 3.5.1 and below suffer from a cross site request forgery vulnerability. • https://packetstorm.news/files/id/188834 • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 2CVE-2024-54795 – SpagoBI 3.5.1 Cross Site Scripting
https://notcve.org/view.php?id=CVE-2024-54795
21 Jan 2025 — SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function. SpagoBI versions 3.5.1 and below suffer from persistent cross site scripting vulnerabilities. • https://packetstorm.news/files/id/188832 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 2CVE-2024-54794 – SpagoBI 3.5.1 Command Injection
https://notcve.org/view.php?id=CVE-2024-54794
21 Jan 2025 — The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. SpagoBI versions 3.5.1 and below suffer from a command injection vulnerability. • https://packetstorm.news/files/id/188833 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.9EPSS: 0%CPEs: 1EXPL: 1CVE-2023-38702 – Knowage Server vulnerable to path traversal via upload functionality
https://notcve.org/view.php?id=CVE-2023-38702
04 Aug 2023 — Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint `/knowage/restful-services/dossier/importTemplateFile` allows authenticated users to upload `template file` on the server, but does not need any authorization to be reached. When the JSP file is uploaded, the attacker just needs to connect to `/knowageqbeengine/foo.jsp` to gain code execution on the server. By exploiting this vulnerability, an attacker with low privilege... • https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-7mjh-73q3-c3fc • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.7EPSS: 0%CPEs: 1EXPL: 1CVE-2023-37472 – Query injection in Knowage server
https://notcve.org/view.php?id=CVE-2023-37472
14 Jul 2023 — Knowage is an open source suite for business analytics. The application often use user supplied data to create HQL queries without prior sanitization. An attacker can create specially crafted HQL queries that will break subsequent SQL queries generated by the Hibernate engine. The endpoint `_/knowage/restful-services/2.0/documents/listDocument_` calls the `_countBIObjects_` method of the `_BIObjectDAOHibImpl_` object with the user supplied `_label_` parameter without prior sanitization. This can lead to SQL... • https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-2j3f-f696-7rgj • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-36819 – Knowage-Server vulnerable to Path traversal in download functionalities
https://notcve.org/view.php?id=CVE-2023-36819
03 Jul 2023 — Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/knowage/restful-services/dossier/importTemplateFile_` allows authenticated users to download template hosted on the server. However, starting in the 6.x.x branch and prior to version 8.1.8, the application does not sanitize the `_templateName_ `parameter allowing an attacker to use `*../*` in it, and escaping the directory the template are normally placed and download an... • https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-jw99-hxxj-75g2 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2023-35154 – Knowage-Server vulnerable to account validation bypass
https://notcve.org/view.php?id=CVE-2023-35154
23 Jun 2023 — Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This issue has been patched in version 8.1.8. • https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-48hp-jvv8-cf62 • CWE-287: Improper Authentication •
CVSS: 6.4EPSS: 0%CPEs: 2EXPL: 1CVE-2022-39295 – Improper Neutralization of Alternate XSS Syntax in Knowage-Server
https://notcve.org/view.php?id=CVE-2022-39295
13 Oct 2022 — Knowage is an open source suite for modern business analytics alternative over big data systems. KnowageLabs / Knowage-Server starting with the 6.x branch and prior to versions 7.4.22, 8.0.9, and 8.1.0 is vulnerable to cross-site scripting because the `XSSRequestWrapper::stripXSS` method can be bypassed. Versions 7.4.22, 8.0.9, and 8.1.0 contain patches for this issue. There are no known workarounds. Knowage es una suite de código abierto para una alternativa de análisis empresarial moderna sobre sistemas d... • https://github.com/KnowageLabs/Knowage-Server/blob/b079a654c1708f82f6914c55be6715ad621d9edd/knowageutils/src/main/java/it/eng/spagobi/utilities/filters/XSSRequestWrapper.java#L82-L206 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-87: Improper Neutralization of Alternate XSS Syntax •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 1CVE-2022-31540
https://notcve.org/view.php?id=CVE-2022-31540
11 Jul 2022 — The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. El repositorio kumardeepak/hin-eng-preprocessing versiones hasta 16-07-2019 en GitHub, permite un salto de ruta absoluto porque la función send_file de Flask es usada de forma no segura • https://github.com/github/securitylab/issues/669#issuecomment-1117265726 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •