MEDIUM6.1
GHSA-93h6-wx7r-mgfp
Cross Site Scripting (XSS) in Serenity
Quick fix
GHSA-93h6-wx7r-mgfp — Serenity.Net.Core: upgrade to the fixed version with the command below.
dotnet add package Serenity.Net.Core --version 6.7.0Details
An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to upload .html or .htm files containing an XSS payload. The resulting link can be sent to an administrator user.
Are you affected?
Enter the version of the package you're using.
Affected packages
NuGet/Serenity.Net.Core
Introduced in:
0Fixed in: 6.7.0Fix
dotnet add package Serenity.Net.Core --version 6.7.0NuGet/Serenity.Net.Services
Introduced in:
0Fixed in: 6.7.0Fix
dotnet add package Serenity.Net.Services --version 6.7.0References
- https://nvd.nist.gov/vuln/detail/CVE-2023-31285[ADVISORY]
- https://github.com/serenity-is/Serenity/commit/11b9d267f840513d04b4f4d4876de7823a6e48d2[WEB]
- https://github.com/serenity-is/Serenity/commit/f54e9bfcf8ceb7f26f81a7362349bc1f63251d92[WEB]
- https://github.com/serenity-is/serene/commit/6dce8162f4382badd429a9f0f1470acb64e8c4fd[WEB]
- https://github.com/serenity-is/Serenity[PACKAGE]
- http://packetstormsecurity.com/files/172648/Serenity-StartSharp-Software-File-Upload-XSS-User-Enumeration-Reusable-Tokens.html[WEB]
- http://seclists.org/fulldisclosure/2023/May/14[WEB]