Unrated severityNVD Advisory· Published Jun 23, 2023· Updated Nov 7, 2024
Knowage-Server vulnerable to account validation bypass
CVE-2023-35154
Description
Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This issue has been patched in version 8.1.8.
Affected products
1- Range: < 8.1.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-48hp-jvv8-cf62mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.