CVE-2022-43769

Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

Vantara Pentaho Business Analytics Server

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

3. Apr 2023

Ausgewertete Quellen

• Hersteller
  https://support.pentaho.com/hc/en-us/articles/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versi…
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-43769
• CISA
  Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
• NVD
  CVE-2022-43769