Vendor/product archive

serenity / serene CVEs

Beta · best-effort

3 CVEs tagged to serenity / serene — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to serenity vendor archive

CVE-2023-31287

Published Apr 27, 2023

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

CVE-2023-31286

Published Apr 27, 2023

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the server response leaks the existence of users. If one tries to r…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-31285

Published Apr 27, 2023

An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings are not allowed, but it is possible to…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1