KNIME Business Hub Open Redirect Vulnerability

Vulnerability

A open redirect vulnerability exists in KNIME Business Hub versions prior to 1.16.0. This vulnerability allows an unauthenticated remote attacker to create a link that, when clicked by a user, redirects them to a page of the attacker's choice. This could potentially be used for phishing or similar attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users, potentially allowing for phishing attacks or similar social engineering tactics.

Remediation

Users are advised to update to KNIME Business Hub version 1.16.0 or later.

Added: Oct 2, 2025, 1:17 PM
Updated: Oct 2, 2025, 7:55 PM

Vulnerability Rating

Custom Algorithm
spread
3.1
impact
1.0
exploitability
6.0
remediation
7.7
relevance
0.6
threat
0.0
urgency
1.4
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.