Threats affecting pkg:github/gnu/savane

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.6	EPSS 0.9%	CVE-2024-29399savane · Code Injection High7.6EPSS 0.9%2024-04-11CVE Database V5CVE-2024-29399 An issue was discovered in GNU Savane v.3.13 and before, allows a remote attacker to execute arbitrary code and escalate privileges via a crafted file to the upload.php component. EPSS 0.9%Vulnerability CWE-94	CVE Database V5	2024-04-11
Medium	6.0	EPSS 0.4%	CVE-2024-27631savane · Cross-Site Request Forgery Medium6.0EPSS 0.4%2024-04-08CVE Database V5CVE-2024-27631 Cross Site Request Forgery vulnerability in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via siteadmin/usergroup.php EPSS 0.4%Vulnerability CWE-352	CVE Database V5	2024-04-08

Page 1 of 1