CVE-2024-48590

CVE-2024-48590 Vulnerability Disclosure: SSRF in Inflectra SpiraTeam 7.2.00 Description Inflectra SpiraTeam version 7.2.00 is vulnerable to Server-Side Request Forgery SSRF through the NewsReaderService component. Vulnerability Type Server-Side Request Forgery SSRF Vendor Inflectra Affected Produ...

CVE-2024-48591

CVE-2024-48591 Vulnerability Disclosure: XSS in Inflectra SpiraTeam 7.2.00 Description Inflectra SpiraTeam version 7.2.00 is vulnerable to Cross-Site Scripting XSS through the upload of specially crafted SVG files, which can execute JavaScript when viewed directly. Vulnerability Type Cross-Site...

EUVD-2025-7137

Malicious code in bioql PyPI...

EUVD-2025-7130

Malicious code in bioql PyPI...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

Exploit for Cross-site Scripting in Inflectra Spirateam

CVE-2024-48591 Vulnerability Disclosure: XSS in Inflectra S...

Exploit for Server-Side Request Forgery in Inflectra Spirateam

CVE-2024-48590 Vulnerability Disclosure: SSRF in Inflectra...

Inflectra SpiraTeam 安全漏洞

Inflectra SpiraTeam is a project management software from Inflectra, Inc. It is used for the management and delivery of software development and testing projects. A security vulnerability exists in Inflectra SpiraTeam version 7.2.00 that stems from NewsReaderService being vulnerable to a...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48591

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting XSS. A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590: Server-Side Request Forgery (SSRF)

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery SSRF via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information...

CVE-2024-48590

Inflectra SpiraTeam 7.2.00 is vulnerable to a Server-Side Request Forgery (SSRF) via the NewsReaderService component. A remote attacker can send specially crafted requests to this service, forcing the server to make unintended requests, which can lead to the capture of authentication hashes from ...

PT-2025-12335

Name of the Vulnerable Software and Affected Versions Inflectra SpiraTeam version 7.2.00 Description The issue allows an attacker to perform Server-Side Request Forgery SSRF via the NewsReaderService, enabling them to escalate privileges and obtain sensitive information. Recommendations For...

Inflectra SpiraTeam 安全漏洞

Inflectra SpiraTeam is a project management software from Inflectra, Inc. It is used for the management and delivery of software development and testing projects. A security vulnerability exists in Inflectra SpiraTeam version 7.2.00, which stems from the fact that uploading specially crafted SVG...

PT-2025-12352

Name of the Vulnerable Software and Affected Versions Inflectra SpiraTeam version 7.2.00 Description The issue allows a specially crafted SVG file to be uploaded, which can render and execute JavaScript when viewed directly, potentially leading to Cross Site Scripting XSS attacks. Recommendations...