← All advisories

Medium severity6.0NVD Advisory· Published Apr 8, 2024· Updated Jun 17, 2026

CVE-2024-27631

CVE-2024-27631

Description

Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

GNU/Savane3 versions
cpe:2.3:a:gnu:savane:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gnu:savane:*:*:*:*:*:*:*:*range: <3.13
- (no CPE)
- (no CPE)range: <=3.12

Patches

Vulnerability mechanics

References

2

git.savannah.nongnu.org/cgit/administration/savane.git/commit/nvdPatch
medium.com/%40allypetitt/how-i-found-3-cves-in-2-days-8a135eb924d3nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.