Approved changes feed: RSS · Atom
cpe:2.3:a:savignano:s-notify:*:*:*:*:*:jira:*:*
part: a version: * update: *
| Vendor | Savignano (16aeb81f-41b6-5b40-b829-287351f52099) |
|---|---|
| Product | S Notify (b5de3595-9672-5eb5-834d-b0000a58e0cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | jira |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23737 |
vulnerable | 2026-06-08 06:29:40.329683 |
Details available
Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email.
Published: 2024-07-01T00:00:00.000Z
Updated: 2025-03-18T15:02:41.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50930 |
vulnerable | 2026-06-08 06:16:17.050173 |
Details available
HIGH (8.3)
An issue was discovered in savignano S/Notify before 4.0.2 for Jira. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malicious website. If executed while an administrator is logged on to Jira, an attacker could exploit this to modify the configuration of the S/Notify app on that host. This can, in particular, lead to email notifications being no longer encrypted when they should be.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-05-14T19:23:28.910Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.