Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-3019

Cross-site scripting vulnerabilities in KNIME Business Hub web pages

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
KNIME

Description

KNIME Business Hub is affected by several cross-site scripting vulnerabilities in its web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary Java Script may be executed with this user's permissions. This can lead to information loss and/or modification of existing data. The issues are caused by a bug https://github.com/Baroshem/nuxt-security/issues/610 in the widely used nuxt-security module. There are no viable workarounds therefore we strongly recommend to update to one of the following versions of KNIME Business Hub: * 1.13.3 or later * 1.12.4 or later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

KNIME KNIME Business Hub

Default version status: unaffected

  • 1.13.0 to < 1.13.3affected
  • 1.12.0 to < 1.12.4affected

References