Knowage Blind Server-Side Request Forgery Vulnerability

A blind server-side request forgery vulnerability has been identified in Knowage versions prior to 8.1.37. This vulnerability allows attackers to send requests to arbitrary hosts and paths. Although the attacker cannot read the response, the vulnerability's impact is limited, it could be used to scan the internal network.

Impact

Exploitation of this vulnerability could allow an attacker to perform unauthorized network scans, potentially leading to further exploitation of internal resources.

Remediation

Users can upgrade to Knowage version 8.1.37 or later to address this vulnerability.