CVE-2024-27631

概要

参考情報

• git.savannah.nongnu.org/cgit/administration/savane.git/commit · Patch
• ally-petitt/CVE-2024-27631 · Exploit
• medium.com/%40allypetitt/how-i-found-3-cves-in-2-days-8a135eb924d3 · Exploit

savane のその他の脆弱性

• CVE-2024-29399高 7.6An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a cr…
• CVE-2024-27632高 8.8An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.
• CVE-2024-27630高 7.5Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input…