← Database

CVE-2024-48590

CRITICAL CVSS: 9.8 Published: 2025-03-20 Modified: 2026-06-17

Description

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information.

Affected Platforms

Inflectra Spirateam

Weakness Type

CWE-918

References