2024-07-02 14:06:48 +00:00

25 lines
1.0 KiB
JSON

{
"id": "CVE-2024-23737",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-07-01T22:15:02.857",
"lastModified": "2024-07-02T12:09:16.907",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email."
},
{
"lang": "es",
"value": "Vulnerabilidad de falsificaci\u00f3n de solicitud entre sitios (CSRF) en savignano S/Notify anterior a 4.0.2 para Jira permite a los atacantes manipular el certificado S/MIME de la clave PGP de un usuario a trav\u00e9s de un enlace malicioso o un correo electr\u00f3nico."
}
],
"metrics": {},
"references": [
{
"url": "https://help.savignano.net/snotify-email-encryption/sa-2023-11-28#SA-2023-11-28-CSRFbasedvulnerabilityinuserupload",
"source": "cve@mitre.org"
}
]
}