CVE-2024-54792

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

CVE-2024-54792

SpagoBI version 3.5.1 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability within the user administration panel. The root cause is a lack of CSRF countermeasures in the panel used to manage user grants. An authenticated attacker can trick a victim with administrative righ...