CVE-2024-54792

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p22

Published

Jan 21, 2025 (Jan 21, 2025)

Modified

Jun 17, 2026

Description

A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users.

Vendors: eng
Products: spagobi
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.