CVE-2023-50932
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2023-50932 is a vulnerability affecting savignano S/Notify before version 4.0.2 used in Confluence. This issue allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, enabling them to modify the configuration settings of S/Notify. An administrative user is at risk of having these modifications made while they are logged on to Confluence. Malicious links in emails or visits to malicious websites can initiate the attack. Successful exploitation of this vulnerability can result in email notifications no longer being encrypted, posing a security risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions