Eng Knowage any version

Knowage Server vulnerable to path traversal via upload functionality

In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application.

Knowage Contains a Remote Code Execution Vulnerability

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report.

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source credentials in cleartext, which includes databases.

Query injection in Knowage server

Knowage-Server vulnerable to account validation bypass

Knowage-Server vulnerable to Path traversal in download functionalities

Knowage is vulnerable to blind server-side request forgery (SSRF)

Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBI_HOST' parameter.

In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.

Improper Neutralization of Alternate XSS Syntax in Knowage-Server

Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage.

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in the signup page.

Knowage vulnerable to server-side request forgery

A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in "/restful-services/2.0/analyticalDrivers" via the 'LABEL' and 'NAME' parameters.