CVE-2024-48591: Inflectra Spirateam

Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting (XSS). A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing.

Affected products

• Inflectra Spirateam: version 7.2.00 only

Published 2025-03-20. Last modified 2026-06-17.