CVE-2024-48590

Name of the Vulnerable Software and Affected Versions Inflectra SpiraTeam version 7.2.00

Description The issue allows an attacker to perform Server-Side Request Forgery (SSRF) via the NewsReaderService, enabling them to escalate privileges and obtain sensitive information.

Recommendations For Inflectra SpiraTeam version 7.2.00, consider disabling the NewsReaderService as a temporary workaround until a patch is available. Restrict access to sensitive information and privileges to minimize the risk of exploitation.