Approved changes feed: RSS · Atom
cpe:2.3:a:savignano:s-notify:*:*:*:*:*:confluence:*:*
part: a version: * update: *
| Vendor | Savignano (16aeb81f-41b6-5b40-b829-287351f52099) |
|---|---|
| Product | S Notify (b5de3595-9672-5eb5-834d-b0000a58e0cf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | confluence |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23737 |
vulnerable | 2026-06-08 06:29:40.328564 |
Details available
Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email.
Published: 2024-07-01T00:00:00.000Z
Updated: 2025-03-18T15:02:41.176Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23735 |
vulnerable | 2026-06-08 06:29:40.325567 |
Details available
Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate.
Published: 2024-04-10T00:00:00.000Z
Updated: 2024-12-04T21:04:18.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50932 |
vulnerable | 2026-06-08 06:16:17.054419 |
Details available
HIGH (8.3)
An issue was discovered in savignano S/Notify before 4.0.2 for Confluence. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malicious website. If executed while an administrator is logged on to Confluence, an attacker could exploit this to modify the configuration of the S/Notify app on that host. This can, in particular, lead to email notifications being no longer encrypted when they should be.
Published: 2024-01-09T00:00:00.000Z
Updated: 2025-06-13T19:02:33.945Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.