CVE-2023-31285

MEDIUM6.1EPSS 0.68%

Cross Site Scripting (XSS) in Serenity

發布日:2023/4/27修改日:2024/2/16

描述

An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to upload .html or .htm files containing an XSS payload. The resulting link can be sent to an administrator user.

受影響套件(2)

NuGet/Serenity.Net.Corefrom 0, < 6.7.0
NuGet/Serenity.Net.Servicesfrom 0, < 6.7.0

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

參考連結(7)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-31285
PATCHhttps://github.com/serenity-is/Serenity
WEBhttp://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html
WEBhttp://seclists.org/fulldisclosure/2023/May/14
WEBhttps://github.com/serenity-is/serene/commit/6dce8162f4382badd429a9f0f1470acb64e8c4fd
WEBhttps://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2
WEBhttps://github.com/serenity-is/Serenity/commit/f54e9bfcf8ceb7f26f81a7362349bc1f63251d92