CVE-2013-6234

CVE-2013-6234 describes an unrestricted file upload vulnerability in the SpagoBI Worksheet designer (versions before 4.1). A remote, authenticated user could upload a file with an executable extension and access it via a direct request to the file in an unspecified directory, enabling arbitrary c...

CVE-2013-6231

CVE-2013-6231 affects SpagoBI (primarily SpagoBI 4.0). The vulnerability is a privilege-escalation flaw in the AdapterHTTP servlet (ACTION_NAME=MANAGE_USER_ACTION) that can be triggered by crafted input, enabling a remote attacker to gain Administrator privileges after authenticating. Remediation...