{
  "id": "CVE-2024-23737",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-07-01T22:15:02.857",
  "lastModified": "2024-07-02T12:09:16.907",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de falsificaci\u00f3n de solicitud entre sitios (CSRF) en savignano S/Notify anterior a 4.0.2 para Jira permite a los atacantes manipular el certificado S/MIME de la clave PGP de un usuario a trav\u00e9s de un enlace malicioso o un correo electr\u00f3nico."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://help.savignano.net/snotify-email-encryption/sa-2023-11-28#SA-2023-11-28-CSRFbasedvulnerabilityinuserupload",
      "source": "cve@mitre.org"
    }
  ]
}