← Database

CVE-2022-43769

HIGH CVSS: 8.8 Published: 2023-04-03 Modified: 2026-06-17

Description

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

Affected Platforms

Hitachi Vantara Pentaho Business Analytics Server

Weakness Type

CWE-74, CWE-94

References