CVE-2024-27630

CVE-2024–27630 Schwachstellen-Details Überblick In Savane v3.12 und früher führt eine fehlende Validierung des Parameters fileid beim Löschen einer Datei von /bugs/index.php zu einer Schwachstelle durch Insecure Direct Object Reference IDOR, die es einem authentifizierten Administrator einer Grup...

CVE-2024-27631

CVE-2024-27631 Details zur Schwachstelle Überblick In Savane v3.12 und früher kann ein fehlender CSRF-Schutz bei administrativen Funktionen eine Privilegieneskalation und/oder die Übernahme von Konten ermöglichen. Insbesondere der Endpunkt /siteadmin/usergroup.php enthält die Funktionalität,...

CVE-2024-27632

Dettagli sulla Vulnerabilità CVE-2024-27632 Panoramica In Savane v3.12 e versioni precedenti, il timestamp Unix viene utilizzato come seme nel Generatore di Numeri Pseudo-Casuali PRNG impiegato per generare i token di protezione contro la Cross-Site Request Forgery CSRF formid. Di conseguenza, un...

CVE-2024-29399

Dettagli della vulnerabilità CVE-2024-29399 Panoramica In Savane v3.13 e versioni precedenti, la mancanza di validazione dei file caricati può consentire l'escalation dei privilegi. I server web configurati secondo le istruzioni di installazione sono vulnerabili a Cross-Site Scripting XSS. In...

CVE-2026-56355

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

CVE-2026-56355

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

CVE-2026-56355

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

EUVD-2026-38135

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

CVE-2026-56355

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

CVE-2026-56355

CVE-2026-56355 affects GNU Savannah Administration Savane up to version 3.17. The connected documents describe an authorization issue caused by using untrusted data in the authorization path. No explicit exploit vectors, impact details, or remediation/fixes are provided in the documents. Technica...

CVE-2026-56355: Incorrect Behavior Order

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

PT-2026-51179

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization...

EUVD-2024-24824

Malicious code in bioql PyPI...

EUVD-2024-24826

Malicious code in bioql PyPI...

CVE-2024-29399

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component...

CVE-2024-27630

Insecure Direct Object Reference IDOR in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackersdatadeletefile function...

CVE-2024-27632

An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the formid in the formheader function...

CVE-2024-27631

Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php...

CVE-2024-29399

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component...

CVE-2024-29399

An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component...