CVE-2024-23736: Bitbucket Snotify

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email.

Affected products

• Bitbucket Snotify: up to and including 2.0.0
• Confluence Snotify: up to and including 4.0.1
• Jira Snotify: up to and including 4.0.1

Published 2024-07-01. Last modified 2026-06-17.