In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.

Published Aug 28, 2019 · Updated Aug 4, 2024 · Assigned by mitre