high8.8
CVE-2021-44726
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.
Impact
KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Knime | Knime Server | before 4.13.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.knime.com/2021-06/server_update_guide/index.html#_bugfixes
- https://zigrin.com/advisories/knime-server-dom-based-xss-in-a-login-panel/
- https://docs.knime.com/2021-06/server_update_guide/index.html#_bugfixes
- https://zigrin.com/advisories/knime-server-dom-based-xss-in-a-login-panel/