← Back

Inflectra

inflectra

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Spirateam
spirateam
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-48591
1Inflectra
1Spirateam
Apr 1, 2025
Mar 20, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting (XSS). A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing.
CVE-2024-48590
1Inflectra
1Spirateam
Apr 1, 2025
Mar 20, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information.