CVE-2024-54792

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

PT-2025-3072

Name of the Vulnerable Software and Affected Versions SpagoBI version 3.5.1 Description A Cross-Site Request Forgery CSRF issue has been found in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in,...

CVE-2024-54792

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...

CVE-2024-54792

SpagoBI version 3.5.1 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability within the user administration panel. The root cause is a lack of CSRF countermeasures in the panel used to manage user grants. An authenticated attacker can trick a victim with administrative righ...

CVE-2024-54792: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users...