CVE-2024-27630

CVE-2024-27630 is an Insecure Direct Object Reference (IDOR) vulnerability affecting GNU Savane v.3.12 and earlier, allowing remote attackers to delete arbitrary files through crafted input to the trackers_data_delete_file function. It carries a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and no user interaction required, potentially leading to high impact on confidentiality. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, including an article from a notable security researcher.