Approved changes feed: RSS · Atom
cpe:2.3:a:savignano:s\/notify:*:*:*:*:*:bitbucket:*:*
part: a version: * update: *
| Vendor | Savignano (16aeb81f-41b6-5b40-b829-287351f52099) |
|---|---|
| Product | S/Notify (ec15b8ab-0056-591c-b18a-26600d68e983) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | bitbucket |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50931 |
vulnerable | 2026-06-08 06:16:17.051586 |
Details available
HIGH (8.3)
An issue was discovered in savignano S/Notify before 2.0.1 for Bitbucket. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malicious website. If executed while an administrator is logged on to Bitbucket, an attacker could exploit this to modify the configuration of the S/Notify app on that host. This can, in particular, lead to email notifications being no longer encrypted when they should be.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-04-17T18:00:42.044Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.