medium6.1
CVE-2021-30058
Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS).
Impact
Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBI_HOST' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eng | Knowage | before 7.4 |