Read the docs
TI-2004-01496 Aliases CVE-2004-1620GHSA-3hfj-vjmw-rjj4

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to…

Priority LOW 34Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Why it matters now

EPSS 0.08139 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*0.3Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*0.4Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*0.5Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*0.5_pl1Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*0.6Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.6_pl1:*:*:*:*:*:*:*0.6_pl1Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.6_pl2:*:*:*:*:*:*:*0.6_pl2Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*0.6_pl3Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.6_rc1:*:*:*:*:*:*:*0.6_rc1Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.6_rc2:*:*:*:*:*:*:*0.6_rc2Vulnerables9y
  • cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:* Versions 0.5_pl1 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:* Versions 0.6 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.6_pl1:*:*:*:*:*:*:* Versions 0.6_pl1 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.6_pl2:*:*:*:*:*:*:* Versions 0.6_pl2 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:* Versions 0.6_pl3 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.6_rc1:*:*:*:*:*:*:* Versions 0.6_rc1 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.6_rc2:*:*:*:*:*:*:* Versions 0.6_rc2 Vulnerable ·s9y
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*0.7_beta1Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*0.7_beta2Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*0.7_beta3Vulnerables9y
cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*0.7_beta4Vulnerables9y
  • cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:* Versions 0.7_beta1 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:* Versions 0.7_beta2 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:* Versions 0.7_beta3 Vulnerable ·s9y
  • cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:* Versions 0.7_beta4 Vulnerable ·s9y

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-1620
  2. 2026-10-03 Alias added: GHSA-3hfj-vjmw-rjj4

References

Exploit 1

Other 8

  • TI-2023-30216 Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload CVSS 4.0HIGH 8.7
  • TI-2024-38379 Serendipity 2.5.0 Remote Code Execution via Authenticated Media Upload CVSS 4.0HIGH 8.6
  • TI-2026-28827 Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST CVSS 3.1HIGH 7.2
  • TI-2026-28819 Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain CVSS 3.1MEDIUM 6.9
  • TI-2023-30215 Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation CVSS 4.0MEDIUM 5.1
  • TI-2011-00987 Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5… CVSS 3.1CRITICAL 9.8
See all 57 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences