CVE-2021-44725

Impact

KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://docs.knime.com/2021-06/server_update_guide/index.html#_bugfixes
• https://zigrin.com/advisories/knime-server-directory-path-traversal-in-the-profiles-section/
• https://docs.knime.com/2021-06/server_update_guide/index.html#_bugfixes
• https://zigrin.com/advisories/knime-server-directory-path-traversal-in-the-profiles-section/