CVE-2022-44749

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

A directory traversal vulnerability in the ZIP archive extraction routines of KNIME Analytics Platform 3.2.0 and above can result in arbitrary files being overwritten on the user's system. This vulnerability is also known as 'Zip-Slip'.

An attacker can create a KNIME workflow that, when being opened by a user, can overwrite arbitrary files that the user has write access to. It's not necessary to execute the workflow, opening the workflow is sufficient. The user will notice that something is wrong because an error is being reported but only after the files have already been written.

This can impact data integrity (file contents are changed) or cause errors in other software (vital files being corrupted). It can even lead to remote code execution if executable files are being replaced and subsequently executed by the user. In all cases the attacker has to know the location of files on the user's system, though.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
KNIMEKNIME Analytics Platform>= 4.5.0, < 4.5.3; >= 4.6.0, < 4.6.4; >= 3.2.0, < 4.4.5

References

Timeline

Published
Nov 24, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-44755.4The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them backCVE-2022-447507.8HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauCVE-2022-447517.8HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unautCVE-2022-447527.8HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unaCVE-2022-447537.8HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauCVE-2022-447547.8HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauCVE-2022-447557.8HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unautCVE-2022-447566.5Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation. This may lead to information disclosure. This reqCVE-2022-447578.2BigFix Insights for Vulnerability Remediation (IVR) uses weak cryptography that can lead to credential exposure. An attacker could gain accCVE-2022-447585.3BigFix Insights/IVR fixlet uses improper credential handling within certain fixlet content. An attacker can gain access to information thatCVE-2022-447595.4Improper sanitization of SVG files in HCL Leap allows client-side script injection in deployed applications.CVE-2022-44765.4The Download Manager WordPress plugin before 3.2.62 does not validate and escapes some of its shortcode attributes before outputting them ba