| Package | Affected versions | Patched versions |
|---|---|---|
| knowage | < 6.4 | 6.4 |
In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free