- Description
- A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users.
- Source
- cve@mitre.org
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CWE-352
- Hype score
- Not currently trending
New post from https://t.co/uXvPWJy6tj (CVE-2024-54792 | SpagoBI 3.5.1 Administration Panel cross-site request forgery) has been published on https://t.co/tBYoTkegIu
@WolfgangSesin
21 Jan 2025
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-54792 A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into … https://t.co/jQfubZ4iKM
@CVEnew
21 Jan 2025
275 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes