Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对资源描述符的控制不恰当(资源注入)
Vulnerability Title
Knowage 安全漏洞
Vulnerability Description
Knowage是意大利Knowage公司的一套用于在传统资源和大数据系统上进行现代业务分析的开源套件。 Knowage 8.1.30之前版本存在安全漏洞，该漏洞源于SpagoBI API支持中的DataSourceResource.java不能确保java:comp/env/jdbc/出现在JNDI名称的开头。
CVSS Information
N/A
Vulnerability Type
N/A