Savannah vulnerabilities
We track 1 vulnerability in Savannah products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 8, 2024.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Savannah vulnerabilities
- 7.5 High severity
savane: Authorization Bypass Through User-Controlled Key
Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function.