PT-2023-12821 · Unknown · Serve-Lite

Liran Tal · Published 2023-01-25 · Updated 2023-02-01 · CVE-2022-25847

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions serve-lite versions all

Description The issue arises when the software detects a request to a directory and renders a file listing of its contents. This listing includes links with actual file names, but these names are not sanitized or output encoded, leading to Cross-site Scripting (XSS).

Recommendations For all versions, consider disabling the directory listing feature until a proper fix is implemented to sanitize or encode file names in links. Restrict access to directory listings to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-25847

GHSA-J8X7-QCW4-XX85

Affected Products

Serve-Lite

References · 5

• 🔥 https://gist.github.com/lirantal/52debd25284726fcc2eaed9c7512975c · Exploit
• https://osv.dev/vulnerability/GHSA-j8x7-qcw4-xx85 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25847 · Security Note
• https://github.com/beenotung/serve-lite · Note
• https://security.snyk.io/vuln/SNYK-JS-SERVELITE-3149915 · Note