PT-2024-20044 · S/Notify · S/Notify

Published 2024-04-10 · Updated 2025-06-17 · CVE-2024-23735

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions S/Notify versions prior to 4.0.0 for Confluence

Description A Cross Site Scripting (XSS) issue exists in the S/MIME certificate upload functionality of the User Profile pages, allowing attackers to manipulate user data via specially crafted certificates.

Recommendations For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-23735

Affected Products

S/Notify

References · 5

• https://help.savignano.net/snotify-email-encryption/security-advisories · Vendor Advisory
• https://help.savignano.net/snotify-email-encryption/sa-2023-11-02 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23735 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23735 · Vendor Advisory
• https://t.me/cvenotify/125977 · Telegram Post