← Back to browse
·
API
CVE-2024-54794
Severity
CRITICAL
CVSS
9.1
EPSS
0.12829
Risk score
40.89
CISA KEV
No
PoC
No
Published
2025-01-21
Modified
2025-10-17
First seen
2026-08-07
Aliases
EUVD-2024-52672, GHSA-36QV-62J7-22CF
Products
n/a:n/a n/a
Sources
euvd
EUVD-2024-52672
Description
The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-52672
https://github.com/MarioTesoro/CVE-2024-54794
https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2024-54794