CVE-2021-30056

Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS)

published April 5, 2021

CVSS
—
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00616 · 48.9th percentile
Published
2021-04-05T10:45Z
EPSS history
Timeline
  • 05 APR 10:45Z
    Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS)
    cvelistv5