CVE-2023-37472

Knowage is an open source suite for business analytics. The application often use user supplied data to create HQL queries without prior sanitization. An attacker can create specially crafted HQL queries that will break subsequent SQL queries generated by the Hibernate engine. The endpoint `_/knowage/restful-services/2.0/documents/listDocument_` calls the `_countBIObjects_` method of the `_BIObjectDAOHibImpl_` object with the user supplied `_label_` parameter without prior sanitization. This can lead to SQL injection in the backing database. Other injections have been identified in the application as well. An authenticated attacker with low privileges could leverage this vulnerability in order to retrieve sensitive information from the database, such as account credentials or business information. This issue has been addressed in version 8.1.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-89

• https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-2j3f-f696-7rgjExploit, Third Party Advisory
• https://github.com/KnowageLabs/Knowage-Server/security/advisories/GHSA-2j3f-f696-7rgjExploit, Third Party Advisory

Published

Jul 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37467Discourse is an open source discussion platform. Prior to ve…5.4
• CVE-2023-37468Feedbacksystem is a personalized feedback system for student…5.5
• CVE-2023-37469CasaOS is an open-source personal cloud system. Prior to ver…8.8
• CVE-2023-3747Zero Trust Administrators have the ability to disallow end u…5.5
• CVE-2023-37470Metabase is an open-source business intelligence and analyti…9.8
• CVE-2023-37471Open Access Management (OpenAM) is an access management solu…9.8
• CVE-2023-37473zenstruck/collections is a set of helpers for iterating/pagi…8.8
• CVE-2023-37474Copyparty is a portable file server. Versions prior to 1.8.2…7.5
• CVE-2023-37475Hamba avro is a go lang encoder/decoder implementation of th…7.5
• CVE-2023-37476OpenRefine is a free, open source tool for data processing. …7.8
• CVE-2023-374771Panel is an open source Linux server operation and maintena…8.8
• CVE-2023-37478pnpm is a package manager. It is possible to construct a tar…9.8