Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary files via crafted input to the trackers_data_delete_file function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 78.0%