CVE-2023-36819: Knowage-Server vulnerable to Path traversal in download functionalities

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-07-03 · updated 2026-06-17
Weakness: CWE-22

Description

Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/knowage/restful-services/dossier/importTemplateFile_` allows authenticated users to download template hosted on the server. However, starting in the 6.x.x branch and prior to version 8.1.8, the application does not sanitize the `_templateName_ `parameter allowing an attacker to use `*../*` in it, and escaping the directory the template are normally placed and download any file from the system. This vulnerability allows a low privileged attacker to exfiltrate sensitive configuration file. This issue has been patched in Knowage version 8.1.8.

Affected products

KnowageLabs Knowage-Server: from 6.0.0 before 8.1.8 — fixed in 8.1.8

How to fix

Upgrade to a fixed version: KnowageLabs Knowage-Server 8.1.8. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-36819 or the next vulnerability affects your stack