https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-23737.htmlhttps://patchthecve.com/cve/CVE-2024-23737.htmlWed, 17 Jun 2026 07:13:29 +0000MEDIUM 5.4: Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Jira allows attackers to allows attackers to manipulate a user's S/MIME certificate of PGP key via malicious link or email.https://patchthecve.com/cve/CVE-2024-23735.htmlhttps://patchthecve.com/cve/CVE-2024-23735.htmlWed, 17 Jun 2026 07:13:29 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in in the S/MIME certificate upload functionality of the User Profile pages in savignano S/Notify before 4.0.0 for Confluence allows attackers to manipulate user data via specially crafted certificate.https://patchthecve.com/cve/CVE-2024-23734.htmlhttps://patchthecve.com/cve/CVE-2024-23734.htmlWed, 17 Jun 2026 07:13:28 +0000MEDIUM 5.2: Cross Site Request Forgery vulnerability in in the upload functionality of the User Profile pages in savignano S/Notify before 2.0.1 for Bitbucket allow attackers to replace S/MIME certificate or PGP keys for arbitrary users via crafted link.https://patchthecve.com/cve/CVE-2023-50932.htmlhttps://patchthecve.com/cve/CVE-2023-50932.htmlWed, 17 Jun 2026 06:40:15 +0000HIGH 8.3: An issue was discovered in savignano S/Notify before 4.0.2 for Confluence. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting ahttps://patchthecve.com/cve/CVE-2023-50931.htmlhttps://patchthecve.com/cve/CVE-2023-50931.htmlWed, 17 Jun 2026 06:40:15 +0000HIGH 8.3: An issue was discovered in savignano S/Notify before 2.0.1 for Bitbucket. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a https://patchthecve.com/cve/CVE-2023-50930.htmlhttps://patchthecve.com/cve/CVE-2023-50930.htmlWed, 17 Jun 2026 06:40:15 +0000HIGH 8.3: An issue was discovered in savignano S/Notify before 4.0.2 for Jira. While an administrative user is logged on, the configuration settings of S/Notify can be modified via a CSRF attack. The injection could be initiated by the administrator clicking a malicious link in an email or by visiting a malic