CVE-2024-23737: Savignano S-Notify

Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email.

Affected products

• Savignano S-Notify: before 2.0.1 (fixed in 2.0.1); before 4.0.2 (fixed in 4.0.2)

Published 2024-07-01. Last modified 2026-06-17.