CVE-2023-35154CWE-287

Knowage-Server vulnerable to account validation bypass

High · published June 23, 2023

CVSS v3.1
7.2
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This issue has been patched in version 8.1.8.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-06-23T20:20Z
EPSS history
Timeline
  • 23 JUN 20:20Z
    Knowage-Server vulnerable to account validation bypass
    cvelistv5