CVE-2024-48591

CVE-2024-48591 漏洞披露：Inflectra SpiraTeam 7.2.00 中的 XSS 描述 Inflectra SpiraTeam 7.2.00 版本存在跨站脚本（XSS）漏洞，通过上传特制的 SVG 文件，在直接查看该文件时可执行 JavaScript。 漏洞类型 跨站脚本（XSS） 厂商 Inflectra 受影响产品 SpiraTeam 7.2.00 受影响组件 TestRuns 部分 攻击类型 远程 影响 权限提升 ：允许攻击者可能获得更高级别的访问权限。 攻击向量 攻击者可以上传包含 JavaScript 的特制 SVG...

CVE-2024-48590

CVE-2024-48590 漏洞披露：Inflectra SpiraTeam 7.2.00 中的 SSRF 描述 Inflectra SpiraTeam 版本 7.2.00 的 NewsReaderService 组件存在服务器端请求伪造（SSRF）漏洞。 漏洞类型 服务器端请求伪造（SSRF） 厂商 Inflectra 受影响产品 SpiraTeam 7.2.00 受影响组件 NewsReaderService 攻击类型 远程 影响 权限提升 ：允许攻击者可能获得更高的访问权限。 信息泄露 ：暴露主机系统中的敏感数据。 攻击向量 攻击者可以向 NewsReaderService...

EUVD-2025-7137

Malicious code in bioql PyPI...

EUVD-2025-7130

Malicious code in bioql PyPI...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

Inflectra SpiraTeam 安全漏洞

Inflectra SpiraTeam is a project management software from Inflectra, Inc. It is used for the management and delivery of software development and testing projects. A security vulnerability exists in Inflectra SpiraTeam version 7.2.00, which stems from the fact that uploading specially crafted SVG...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to a Server-Side Request Forgery (SSRF) via the NewsReaderService component. An attacker can send specially crafted requests to this service, prompting the server to make unintended requests. This vulnerability can lead to elevation of privileges and infor...

CVE-2024-48591

Inflectra SpiraTeam version 7.2.00 is vulnerable to Cross-Site Scripting (XSS) within the TestRuns section . The root cause is the ability to upload specially crafted SVG files that execute JavaScript when viewed directly. This vulnerability could potentially lead to an escalation of privileges ....

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

Inflectra SpiraTeam 安全漏洞

Inflectra SpiraTeam is a project management software from Inflectra, Inc. It is used for the management and delivery of software development and testing projects. A security vulnerability exists in Inflectra SpiraTeam version 7.2.00 that stems from NewsReaderService being vulnerable to a...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...