Lucene search
MitreCVELIST:CVE-2023-31285HistoryApr 27, 2023 - 12:00 a.m.
CVE-2023-31285
2023-04-2700:00:00
mitre
www.cve.org
1
cve-2023-31285
xss
serenity serene
startsharp
file upload
administrator
EPSS
0.001
Percentile
37.8%
An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to upload .html or .htm files containing an XSS payload. The resulting link can be sent to an administrator user.
Related
veracode
veracode
Cross-Site Scripting (XSS)
2023-05-08 11:52:33
prion
prion
Cross site scripting
2023-04-27 03:15:00
osv
osv
CVE-2023-31285
2023-04-27 03:15:10
Cross Site Scripting (XSS) in Serenity
2023-04-27 03:30:23
github
github
Cross Site Scripting (XSS) in Serenity
2023-04-27 03:30:23
cve
cve
CVE-2023-31285
2023-04-27 03:15:10
nvd
nvd
CVE-2023-31285
2023-04-27 03:15:10
packetstorm
packetstorm