CVE-2025-59954 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe or…
Critical CVSS: 9.3

CVE-2025-59954

Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8.1.27.
Vendor
Eng
Product
Knowage
CWE
CWE-94
Yayın Tarihi
2025-09-30 11:37:41
Güncelleme
2025-10-08 15:08:19
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-94 Knowage CRITICAL Eng 2025

Referanslar

https://github.com/KnowageLabs/Knowage-Server/commit/1bb60d42557724f7ed24c19df6c5017e169527ca https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-96cv-75hg-xrgq https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-96cv-75hg-xrgq