CVE-2024-57971

DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the b...

Original description

The description as published by the source.

DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
patch github.com
web github.com
web github.com
web spagobi.readthedocs.io

Metadata

CVE: CVE-2024-57971
Published: 2025-02-16
First seen on SecPulse: 1 year ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-99

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago