CVE-2021-30056

Published: 2021-04-05T11:15Z

Last Modified: 2024-11-21T06:03Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt