Approved changes feed: RSS · Atom

cpe:2.3:a:savannah:savane:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSavannah (8daaff22-3300-5af3-a7b4-efb6f6e080f8)
ProductSavane (6d754ea3-a6c2-5902-98f0-1cd520cb7d9b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27632 vulnerable 2026-06-08 06:31:29.084145 Details available
An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.
Published: 2024-04-08T00:00:00.000Z
Updated: 2025-03-26T16:10:50.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27631 vulnerable 2026-06-08 06:31:29.083517 Details available
Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php
Published: 2024-04-08T00:00:00.000Z
Updated: 2024-08-28T18:12:43.481Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27630 vulnerable 2026-06-08 06:31:29.082071 Details available
Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function.
Published: 2024-04-08T00:00:00.000Z
Updated: 2025-03-13T16:17:03.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.