CVEs-PoC/2018/CVE-2018-12355.md

CVE-2018-12355

Description

Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue.

POC

Reference

• https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/sketler/sketler