CVE-2024-27632

GNU Savane versions 3.12 and prior are vulnerable to a privilege escalation flaw due to the incorrect usage of seeds in a Pseudo-Random Number Generator (PRNG) . Specifically, the utils_srand() function uses the Unix timestamp as a seed to generate the form_id used for Cross-Site Request Forgery ...

CVE-2024-27631

GNU Savane versions 3.12 and prior are vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352) due to a lack of protection on administrative functions. An attacker can exploit endpoints such as /siteadmin/usergroup.php to escalate privileges or perform account takeovers by chang...

CVE-2024-27630

GNU Savane versions 3.12 and prior are vulnerable to an Insecure Direct Object Reference (IDOR) in the trackers_data_delete_file function. The root cause is a lack of validation on the file_id parameter when deleting files via /bugs/index.php, allowing an authenticated administrator of a group to...