CVE-2024-27630

Description

Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function.

Weakness classification

• 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-639

Primary references

• cve@mitre.org — Exploit, Mitigation, Third Party Advisory
• cve@mitre.org — Exploit, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mitigation, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory