CVE-2024-54794

CRITICAL

ENG Spagobi - Command Injection

Title source: rule

The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.

Core 2

Core References

Various Sources

Exploit, Third Party Advisory

CVSS v3 9.1

EPSS 0.0222

EPSS Percentile 84.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-77

Status published

Products (1)

eng/spagobi 3.5.1

Published Jan 21, 2025

Tracked Since Feb 18, 2026