CVE-2021-44726

KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-12-08

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Knime Server (Knime)

References

• https://docs.knime.com/2021-06/server_update_guide/index.html#_bugfixes
• https://zigrin.com/advisories/knime-server-dom-based-xss-in-a-login-panel/