PT-2014-9009 · Serendipity · Serendipity

Steffen Röemann · Published 2014-12-31 · Updated 2018-10-09 · CVE-2014-9432

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.0-rc2

Description The issue allows remote attackers to inject arbitrary web script or HTML via a blog comment in the QUERY STRING to serendipity/index.php, potentially leading to cross-site scripting (XSS) attacks. This is due to multiple XSS vulnerabilities in the templates/2k11/admin/overview.inc.tpl file.

Recommendations For Serendipity versions prior to 2.0-rc2, update to version 2.0-rc2 or later to resolve the issue. As a temporary workaround, consider restricting access to the serendipity/index.php file or disabling the affected template file until a patch is available. Avoid using the QUERY STRING parameter in the serendipity/index.php file until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2014-9432

Affected Products

Serendipity

References · 9

• 🔥 http://seclists.org/fulldisclosure/2014/Dec/108 · Exploit
• 🔥 http://packetstormsecurity.com/files/129709/CMS-Serendipity-2.0-rc1-Cross-Site-Scripting.html · Exploit
• 🔥 http://sroesemann.blogspot.de/2014/12/bericht-zu-sroeadv-2014-02.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9432 · Security Note
• http://blog.s9y.org/archives/259-Serendipity-2.0-rc2-released.html · Vendor Advisory
• https://github.com/s9y/Serendipity/commit/36cde3030aaa27a46bf94086e062dfe56b60230b · Note
• http://securityfocus.com/archive/1/534315/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99464 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9432 · Note