CVE-2018-12354

HIGH · CVSS 8.8 EPSS 0.46%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-12354

Severity

HIGH

CVSS

8.8

EPSS

0.46%

Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST request.