Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://help.savignano.net/snotify-email-encryption/sa-2023-11-28 | Vendor Advisory |
| https://help.savignano.net/snotify-email-encryption/sa-2023-11-28 | Vendor Advisory |
| https://help.savignano.net/snotify-email-encryption/security-advisories | Vendor Advisory |
| https://help.savignano.net/snotify-email-encryption/security-advisories | Vendor Advisory |
Configurations
History
17 Jun 2025, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Savignano s-notify
Savignano |
|
| References | () https://help.savignano.net/snotify-email-encryption/security-advisories - Vendor Advisory | |
| References | () https://help.savignano.net/snotify-email-encryption/sa-2023-11-28 - Vendor Advisory | |
| CPE | cpe:2.3:a:savignano:s-notify:*:*:*:*:*:bitbucket:*:* |
10 Apr 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-10 16:15
Updated : 2025-06-17 17:53
NVD link : CVE-2024-23734
Mitre link : CVE-2024-23734
JSON object : View
Products Affected
savignano
- s-notify
CWE
No CWE.