⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-7296

MEDIUM · 6.8 CVSS Gepubliceerd: 08-10-2014 CWE-94

Beschrijving

The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java code via a crafted XSL document.

Vendors

Eng

Affected products

Spagobi

References

spagoworld.org
www.securityfocus.com