Low severity3.5NVD Advisory· Published Sep 1, 2025· Updated Jun 17, 2026

CVE-2025-55007

Description

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, Knowage is vulnerable to server-side request forgery. The vulnerability allows attackers to send requests to arbitrary hosts/paths. Since the attacker is not able to read the response, the impact of this vulnerability is limited. However, an attacker could be able to leverage this vulnerability to scan the internal network. This issue has been patched in version 8.1.37.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Eng/Knowage
cpe:2.3:a:eng:knowage:*:*:*:*:*:*:*:*
Range: <8.1.37
Knowagelabs/Knowage Serverllm-fuzzy2 versions
<8.1.37+ 1 more
- (no CPE)range: <8.1.37
- (no CPE)range: < 8.1.37
Knowagelabs/Knowagellm-fuzzy
Range: <8.1.37

Patches

Vulnerability mechanics

References

github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-7f6m-ph57-52w6nvdPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000