Vulnerability Description
Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Savignano | S-Notify | < 2.0.1 |
Related Weaknesses (CWE)
References
- https://help.savignano.net/snotify-email-encryption/sa-2023-11-28Vendor Advisory
- https://help.savignano.net/snotify-email-encryption/security-advisoriesVendor Advisory
- https://help.savignano.net/snotify-email-encryption/sa-2023-11-28Vendor Advisory
- https://help.savignano.net/snotify-email-encryption/security-advisoriesVendor Advisory
FAQ
What is CVE-2024-23734?
CVE-2024-23734 is a vulnerability with a CVSS score of 5.2 (MEDIUM). Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP ...
How severe is CVE-2024-23734?
CVE-2024-23734 has been rated MEDIUM with a CVSS base score of 5.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-23734?
Check the references section above for vendor advisories and patch information. Affected products include: Savignano S-Notify.