Description
Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage.
Unscored
CVE-2021-30056
EUVD-2021-17000GHSA-2w6j-f6vj-9w6f
Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-ser…
Published Apr 5, 2021 · Updated Aug 3, 2024 · Assigned by mitre