CVE-2024-27631

Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php...

CVE-2024-27631

GNU Savane versions 3.12 and earlier are vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The application fails to adequately verify that requests originate from trusted users, specifically on the siteadmin/usergroup.php endpoint. An attacker can exploit this to escalate privileges, change...