CVE-2018-12354 - Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request

HIGH

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request

Published Jun 13, 2018

8.8

HIGH

CVSS 3.0

EPSS 0.46%

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://medium.com/stolabs/security-issue-on-knowage-spagobi-ec539a68e55		x_refsource_MISCBroken Link

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jun 13, 2018

Updated Aug 5, 2024

Reserved Jun 13, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a