CVE-2024-27632

GNU Savane versions 3.12 and earlier are vulnerable to an elevation of privilege due to the incorrect usage of seeds in a Pseudo-Random Number Generator (PRNG) (CWE-335 ). The utils_srand() function uses a predictable Unix timestamp (via microtime()) to seed the generator for creating form_id tok...

CVE-2024-27631

GNU Savane versions 3.12 and earlier are vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The application fails to adequately verify that requests originate from trusted users, specifically on the siteadmin/usergroup.php endpoint. An attacker can exploit this to escalate privileges, change...

CVE-2024-29399

GNU Savane versions 3.13 and prior are vulnerable to CWE-434: Unrestricted Upload of File with Dangerous Type due to a lack of validation on uploaded files in the upload.php component. This allows a remote attacker to upload a crafted file, such as a PHP script or HTML file, which can lead to Cro...

CVE-2024-27630

GNU Savane versions 3.12 and before are vulnerable to an Insecure Direct Object Reference (IDOR) flaw within the trackers_data_delete_file() function. The root cause is a failure to validate that the file_id parameter belongs to the specified group; while the system checks if the item_id is valid...