CVE-2025-3019

Name of the Vulnerable Software and Affected Versions KNIME Business Hub versions prior to 1.12.4 KNIME Business Hub versions prior to 1.13.3

Description The issue is caused by a bug in the widely used nuxt-security module, which leads to cross-site scripting vulnerabilities in KNIME Business Hub's web pages. If a user clicks on a malicious link or opens a malicious web page, arbitrary JavaScript may be executed with this user's permissions, potentially resulting in information loss and/or modification of existing data.

Recommendations For versions prior to 1.12.4, update to version 1.12.4 or later. For versions prior to 1.13.3, update to version 1.13.3 or later.