Vulnerability Details CVE-2024-48590
Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 49.9%
CVSS Severity
CVSS v3 Score 9.8