Vulnerabilities

TI-2024-17397 CVE-2024-26318 · GHSA-5jjq-8cvj-v6m9

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return…

LOW 27

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00386 Published 2024-02-19 Fixed in 6.8.0 CWE-79

TI-2023-14968 CVE-2023-31287 · GHSA-2hp9-3xfr-r9w2

LOW 36

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00435 Published 2023-04-27 Fixed in 6.7.0 CWE-640

TI-2023-14967 CVE-2023-31286 · GHSA-w7jm-9x4m-8qc3

MEDIUM 63

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01011 Published 2023-04-27 Fixed in 6.7.0 CWE-209

TI-2023-14966 CVE-2023-31285 · GHSA-93h6-wx7r-mgfp

LOW 29

An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00785 Published 2023-04-27 Fixed in 6.7.0 CWE-79