CVE-2021-45096
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Published: 2021-12-16 · CVSS: 4.7 · CVSS 3.1
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7