MEDIUM🇬🇧 English

CVE-2024-27631

CVSS 6.0v3.1pub. 2024-04-08upd. 2025-09-02

Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

  • Gnu Savane

    APP
    Gnu
    < 3.13
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
LPE
CWE
Referencje

Powiązane podatności

CVE-2024-29399HIGH7.6ten sam produkt

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code an...

CVE-2024-27630HIGH7.5ten sam produkt

Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arb...

CVE-2024-27632HIGH8.8ten sam produkt

An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in th...

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓ten sam vendor

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2014-7169CRITICAL9.8⚠ KEVten sam vendor

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the...