Vendor archive

serenity CVEs

Beta · best-effort

4 CVEs tagged to vendor serenity — 0 Critical, 1 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2024-26318

Published Feb 19, 2024

Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-31287

Published Apr 27, 2023

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-31286

Published Apr 27, 2023

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to r…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-31285

Published Apr 27, 2023

An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1