PT-2023-23272 · Unknown · Serenity Serene+1

Fabian Densborn · Published 2023-04-27 · Updated 2025-01-31 · CVE-2023-31285

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Serenity Serene versions prior to 6.7.0 StartSharp versions prior to 6.7.0

Description A security issue was discovered where users can upload temporary files with certain file endings, such as .html or .htm, that contain a malicious payload. This payload can be used to send a link to an administrator user, potentially leading to exploitation.

Recommendations For Serenity Serene versions prior to 6.7.0, update to version 6.7.0 or later to resolve the issue. For StartSharp versions prior to 6.7.0, update to version 6.7.0 or later to resolve the issue. As a temporary workaround, consider restricting the upload of .html and .htm files to prevent potential exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-31285

GHSA-93H6-WX7R-MGFP

Affected Products

Serenity Serene

Startsharp

References · 10

• https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31285 · Security Note
• https://osv.dev/vulnerability/GHSA-93h6-wx7r-mgfp · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-31285 · Vendor Advisory
• https://github.com/serenity-is/Serenity/commit/f54e9bfcf8ceb7f26f81a7362349bc1f63251d92 · Note
• https://github.com/serenity-is/Serenity · Note
• https://github.com/serenity-is/serene/commit/6dce8162f4382badd429a9f0f1470acb64e8c4fd · Note
• http://seclists.org/fulldisclosure/2023/May/14 · Note
• https://t.me/cvenotify/109538 · Telegram Post
• http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html · Note