CVE-2019-12782 | BDVDB-2026-118902 Detail

Description#

An authorization bypass vulnerability in pinboard updates in ThoughtSpot 4.4.1 through 5.1.1 (before 5.1.2) allows a low-privilege user with write access to at least one pinboard to corrupt pinboards of another user in the application by spoofing GUIDs in pinboard update requests, effectively deleting them.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-07-09Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.