Back to Database
Status published
High
CVE-2023-35154
Knowage-Server vulnerable to account validation bypass
Vulnerability Description
Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This issue has been patched in version 8.1.8.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-35154
Credits & Attribution
No credits recorded in the NVD database.
More from KnowageLabs
View All →CVE-2025-59954
Knowage Contains a Remote Code Execution Vulnerability
Critical
9.3
CVE-2025-58441
Knowage is vulnerable to blind server-side request forgery (SSRF)
Medium
6.3
CVE-2025-55007
Knowage vulnerable to server-side request forgery
Low
3.5
CVE-2023-38702
Knowage Server vulnerable to path traversal via upload functionality
Critical
10
CVE-2023-37472
Query injection in Knowage server
High
7.7
Affected Vendor
KnowageLabs
View all reports →Affected Software
Knowage-Server
Vulnerable Versions:
< 8.1.8
Timeline
Official Publish:
June 23rd, 2023
Last Modified:
November 7th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N