Serenity

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Serenity records in CISA KEV

No Serenity vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Serenity · all components

TI-2024-17397 CVE-2024-26318 · GHSA-5jjq-8cvj-v6m9

LOW 27

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00386 Published 2024-02-19 Fixed in 6.8.0 CWE-79