Skip to content
OpenAdvisories

Product · KNIME

KNIME Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2022-44748

    Uploading workflows to KNIME Server may override arbitrary file system contents

    A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being overwritten on the server's file system. This vulnerability is also known as 'Zip-Slip'. An attacker can create a KNIME …

    KNIME KNIME Server