CVE-2023-50930

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Jan 9, 2024
Updated: Feb 28, 2024
CWE ID 352

Summary

CVE-2023-50930 is a vulnerability found in the savignano S/Notify application before version 4.0.2 for Jira. This vulnerability allows an attacker to modify the configuration settings of S/Notify through a Cross-Site Request Forgery (CSRF) attack while an administrative user is logged on. The attack can be initiated by the administrator clicking a malicious link in an email or visiting a malicious website. If successfully executed, the attacker can modify the app's configuration, potentially leading to email notifications being sent without encryption when they should be. The vulnerability has been rated as HIGH severity with a base score of 7.1, indicating a significant potential danger to organizations using this application.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-50930 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options