Knowage CVE-2021-30214

MEDIUM

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2021-05-12 cve@mitre.org

Code Injection Knowage

5.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

May 12, 2021 - 17:15 nvd

MEDIUM 5.4

DescriptionNVD

Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter.

AnalysisAI

Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-74. Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter. Affected products include: Eng Knowage.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Knowage

View all

CVE-2019-13188 CRITICAL Act Now POC

In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. Rated cr

CVE-2023-38702 HIGH This Week POC

Knowage is an open source analytics and business intelligence suite. Rated high severity (CVSS 8.8), this vulnerability

CVE-2021-30055 HIGH This Week POC

A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver componen

CVE-2019-13348 HIGH This Week POC

In Knowage through 6.1.1, an authenticated user who accesses the datasources page will gain access to any data source cr

CVE-2023-37472 MEDIUM This Month POC

Knowage is an open source suite for business analytics. Rated medium severity (CVSS 6.5), this vulnerability is remotely

CVE-2023-36819 MEDIUM This Month POC

Knowage is the professional open source suite for modern business analytics over traditional sources and big data system

CVE-2022-39295 MEDIUM This Month POC

Knowage is an open source suite for modern business analytics alternative over big data systems. Rated medium severity (

CVE-2021-30213 MEDIUM This Month POC

Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). Rated medium severity (CVSS 6.1

CVE-2021-30058 MEDIUM This Month POC

Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). Rated medium severity (CVSS 6.1), this vulnerabili

CVE-2019-13189 MEDIUM This Month POC

In Knowage through 6.1.1, there is XSS via the start_url or user_id field to the ChangePwdServlet page. Rated medium sev

CVE-2021-30212 MEDIUM This Month POC

Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). Rated medium severity (CVSS 5.4), this vulnerabili

CVE-2021-30211 MEDIUM This Month POC

Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). Rated medium severity (CVSS 5.4), this vulnerabili

Same weakness CWE-74 – Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

View all

CVE-2013-2251 CRITICAL POC

CVE-2016-4010 CRITICAL POC

CVE-2015-1592 HIGH POC

CVE-2025-20281 CRITICAL POC

CVE-2015-7309 MEDIUM POC

CVE-2014-8423 CRITICAL POC

CVE-2020-8468 HIGH POC

CVE-2015-3253 CRITICAL

Same technique Code Injection

View all

CVE-2012-0158 HIGH POC

CVE-2014-6287 CRITICAL POC

CVE-2017-7494 CRITICAL POC

CVE-2025-24893 CRITICAL POC

CVE-2025-47812 CRITICAL POC

CVE-2013-3906 HIGH POC

CVE-2017-9822 HIGH POC

CVE-2018-1273 CRITICAL POC

Share

CVE-2021-30214 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy