SpagoBI 3.5.1 Command Injection Vulnerability

CVE-2024-54794 Severity : Critical 9.1 CVSS score : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Summary : Engineering Ingegneria Informatica SpagoBI version 3.5.1 is affected by Command Injection vulnerability in the script input feature. Poc In the Poc the attacker has to be logged into the...

CVE-2024-54794

The script input feature of SpagoBI 3.5.1 allows arbitrary code execution...

CVE-2024-54794

The script input feature of SpagoBI 3.5.1 allows arbitrary code execution...

CVE-2024-54794

The script input feature of SpagoBI 3.5.1 allows arbitrary code execution...

CVE-2024-54794

creationtimestamp| type| source ---|---|--- 2025-01-18 22:00:06+00:00| published-proof-of-concept| Telegram/x09wf5BV-L38GDGdLKlPPES7jGx8v3mUPVSlknfUHbTZ6U 2025-01-21 18:15:31+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbhifiesb2h 2025-01-21 19:49:05+00:00| seen|...