CVE-2023-50932

Summary

CVE-2023-50932 is a vulnerability affecting savignano S/Notify before version 4.0.2 used in Confluence. This issue allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks, enabling them to modify the configuration settings of S/Notify. An administrative user is at risk of having these modifications made while they are logged on to Confluence. Malicious links in emails or visits to malicious websites can initiate the attack. Successful exploitation of this vulnerability can result in email notifications no longer being encrypted, posing a security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.