Description
Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request.
Unscored
CVE-2018-12354
EUVD-2018-4328GHSA-7736-7gm2-mw57
Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST req…
Published Jun 13, 2018 · Updated Aug 5, 2024 · Assigned by mitre