Lucene search

K
cve[email protected]CVE-2024-23734
HistoryApr 10, 2024 - 4:15 p.m.

CVE-2024-23734

2024-04-1016:15:09
web.nvd.nist.gov
24
cve-2024-23734
bitbucket
s/notify
user profile
s/mime certificate
pgp keys
cross site request forgery

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link.

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2024-23734