Description
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Medium · 4.7
CVE-2021-45096
EUVD-2021-31887GHSA-fgh6-7vq6-4p7f
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-1773…
Published Dec 16, 2021 · Updated Aug 4, 2024 · Assigned by mitre