CVE-2021-45096: XEE
Published Dec 16, 2021
·Updated
KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (external XML entity injection) via a crafted workflow file (.knwf), aka AP-17730.
Affected Software
1 affected component
KNIME KNIME Analytics Platform<4.5.0
Event History
Dec 16, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-45096.
2
What is the severity rating of CVE-2021-45096?
CVE-2021-45096 has a severity rating of 4.3, which is considered medium.
3
What is the affected software in CVE-2021-45096?
The affected software in CVE-2021-45096 is KNIME Analytics Platform before version 4.5.0.
4
What is the description of CVE-2021-45096?
CVE-2021-45096 is a vulnerability in KNIME Analytics Platform that allows for XXE (external XML entity injection) via a crafted workflow file (.knwf).
5
How can I fix CVE-2021-45096?
To fix CVE-2021-45096, update KNIME Analytics Platform to version 4.5.0 or higher.