Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:savane:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductSavane (36712ed5-b66e-5136-b98f-d7e38b808fa0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gitgnu/gnu_savane purl2cpe 2026-06-01 10:11:55.106214

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-29399 vulnerable 2026-06-08 06:33:29.135649 Details available
An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component.
Published: 2024-04-11T00:00:00.000Z
Updated: 2024-08-28T17:58:19.558Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27632 vulnerable 2026-06-08 06:31:29.084322 Details available
An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.
Published: 2024-04-08T00:00:00.000Z
Updated: 2025-03-26T16:10:50.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27631 vulnerable 2026-06-08 06:31:29.083710 Details available
Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php
Published: 2024-04-08T00:00:00.000Z
Updated: 2024-08-28T18:12:43.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27630 vulnerable 2026-06-08 06:31:29.083105 Details available
Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function.
Published: 2024-04-08T00:00:00.000Z
Updated: 2025-03-13T16:17:03.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.