medium4.7
CVE-2021-45096
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Impact
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Knime | Knime Analytics Platform | before 4.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/dawid-czarnecki/public-vulnerabilities
- https://www.knime.com/changelog-v45
- https://www.knime.com/whats-new-in-knime-45
- https://zigrin.com/advisories/knime-analytics-platform-external-xml-entity-injection/
- https://github.com/dawid-czarnecki/public-vulnerabilities
- https://www.knime.com/changelog-v45
- https://www.knime.com/whats-new-in-knime-45
- https://zigrin.com/advisories/knime-analytics-platform-external-xml-entity-injection/