CVE-2023-38702

    Dashboard / Vulnerabilities / CVE-2023-38702

    CVE-2023-38702

    Published: 4 Aug 2023Last Modified: 12 Aug 2026

    Summary: Knowage Server vulnerable to path traversal via upload functionality

    Details: Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8.1.8, the endpoint `/knowage/restful-services/dossier/importTemplateFile` allows authenticated users to upload `template file` on the server, but does not need any authorization to be reached. When the JSP file is uploaded, the attacker just needs to connect to `/knowageqbeengine/foo.jsp` to gain code execution on the server. By exploiting this vulnerability, an attacker with low privileges can upload a JSP file to the `knowageqbeengine` directory and gain code execution capability on the server. This issue has been patched in Knowage version 8.1.8.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/38xxx/CVE-2023-38702.json, https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-7mjh-73q3-c3fc, https://nvd.nist.gov/vuln/detail/CVE-2023-38702

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- eb0a58ddc4badcbf4502ca523cf415743c023aa0
    Fixed -d098e2426ba05fab5dbce0eb78c3ccca46b5912e

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-38702 | CVE-DB