CVE-2021-44725

概要

参考情報

• docs.knime.com/2021-06/server_update_guide/index.html · Release Notes
• zigrin.com/advisories/knime-server-directory-path-traversal-in-the-profiles-section

knime server のその他の脆弱性

• CVE-2022-44748高 7.5A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Server since 4.3.0 can result in arbitrary files being o…
• CVE-2021-45097中 5.5KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when installed in unattended mode) keeps the administrator's password in a file without…
• CVE-2021-44726中 6.1KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.