Arbitrary File Upload Vulnerability in Serendipity 2.4-beta1 by S9y
CVE-2023-31576

8.8HIGH

Key Information:

Vendor

S9y

Status
Serendipity
Vendor
CVE Published:
16 May 2023

What is CVE-2023-31576?

An arbitrary file upload vulnerability exists in Serendipity 2.4-beta1, enabling attackers to upload crafted HTML or JavaScript files. This exploitation can lead to unauthorized code execution on the server, posing a significant risk to the integrity and security of the application. Users of this version should apply necessary mitigation measures to safeguard their systems from potential attacks.

References

https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/mai...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.