CVE-2024-48590: Inflectra Spirateam

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information.

Affected products

• Inflectra Spirateam: version 7.2.00 only

Published 2025-03-20. Last modified 2026-06-17.