PT-2023-23272 · Unknown · Serenity Serene+1

Fabian Densborn · Publicado 2023-04-27 · Atualizado 2025-01-31 · CVE-2023-31285

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Serenity Serene versions prior to 6.7.0 StartSharp versions prior to 6.7.0

Description A security issue was discovered where users can upload temporary files with certain file endings, such as .html or .htm, that contain a malicious payload. This payload can be used to send a link to an administrator user, potentially leading to exploitation.

Recommendations For Serenity Serene versions prior to 6.7.0, update to version 6.7.0 or later to resolve the issue. For StartSharp versions prior to 6.7.0, update to version 6.7.0 or later to resolve the issue. As a temporary workaround, consider restricting the upload of .html and .htm files to prevent potential exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-31285

GHSA-93H6-WX7R-MGFP

Produtos afetados

Serenity Serene

Startsharp

Referências · 10

• https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2 · Aviso do Fabricante
• https://github.com/serenity-is/Serenity/commit/f54e9bfcf8ceb7f26f81a7362349bc1f63251d92 · Nota
• https://github.com/serenity-is/Serenity · Nota
• https://github.com/serenity-is/serene/commit/6dce8162f4382badd429a9f0f1470acb64e8c4fd · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-31285 · Nota de Segurança
• http://seclists.org/fulldisclosure/2023/May/14 · Nota
• https://t.me/cvenotify/109538 · Publicação no Telegram
• http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html · Nota
• https://osv.dev/vulnerability/GHSA-93h6-wx7r-mgfp · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-31285 · Aviso do Fabricante