CVE-2024-23736

HIGH

savignano S/Notify < 4.0.2 - Cross-Site Request Forgery via User Upload

Title source: llm
STIX 2.1

Description

Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0015
EPSS Percentile 4.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-352
Status published
Published Jul 01, 2024
Tracked Since Feb 18, 2026