medium6.1
CVE-2021-30213
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS).
Impact
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eng | Knowage | Version 7.3.0 |