Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 07:18:58 +0000 CVE-2026-115494 — CSRF protection could be tricked by forged X-Forwarded-Host header in KNIME Business Hub https://db.gcve.eu/vuln/cve-2026-115494 <p><strong>Affected:</strong> KNIME Business Hub</p> <p>A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API gateway for firewall in front of KNIME Business Hub could remove the X-Forwaded-For header from all incoming requests.</p> <p><strong>Affected:</strong> KNIME Business Hub</p> <p>A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user interaction. This means the state of a resource could be changed without the user noticing. As a workaround, an API gateway for firewall in front of KNIME Business Hub could remove the X-Forwaded-For header from all incoming requests.</p> https://db.gcve.eu/vuln/cve-2026-115494