CVE-2019-12782

—

CVSS 3.0

8.1 high

EPSS

1%p65

Published

Jul 9, 2019 (Jul 9, 2019)

Modified

Jun 17, 2026

Description

An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively deleting them.

Vendors: thoughtspot
Products: thoughtspot
Weakness: CWE-639
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.