Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively deleting them.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ThoughtSpot 授权问题漏洞
Vulnerability Description
ThoughtSpot是美国ThoughtSpot公司的一套商业智能和大数据分析平台。该平台支持搜索、分析和共享实时业务分析数据。 ThoughtSpot 4.4.1版本至5.1.1版本中的公告栏更新存在授权问题漏洞。攻击者可通过伪造公告更新请求中的GUIDs利用该漏洞损坏其他用户的公告栏。
CVSS Information
N/A
Vulnerability Type
N/A