CVE-2026-56355

Published: Jun 20, 2026Modified: Jun 22, 2026Deferred

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: MITRE (Secondary)

Description

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Related CWEs

Incorrect Behavior Order

The product performs multiple related behaviors, but the behaviors are performed in the wrong order in ways which may produce resultant weaknesses.

References (6)

https://cgit.git.savannah.gnu.org/cgit/administration/savane.git/tree/frontend/php/file.php?h=release-3.17#n113

Source: cve@mitre.org

https://cgit.git.savannah.gnu.org/cgit/administration/savane.git/tree/frontend/php/file.php?h=release-3.17#n123

Source: cve@mitre.org

https://news.ycombinator.com/item?id=48605220

Source: cve@mitre.org

https://www.fsf.org/news/statement-regarding-gnu-savannah-security-reports

Source: cve@mitre.org

https://www.hacktron.ai

Source: cve@mitre.org

https://www.mallory.ai/stories/019ee445-bdd4-7775-93b5-a8faaf5c2eb7

Source: cve@mitre.org

Timeline

No history available yet.