medium5.4
CVE-2021-30056
Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS).
Impact
Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eng | Knowage | before 7.4 |