Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4x4h-4pgq-3r66

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 8.6
CVSS3: 7.2

Описание

Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload mechanism by creating a PHP shell with a command execution form that enables arbitrary system command execution on the web server.

Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload mechanism by creating a PHP shell with a command execution form that enables arbitrary system command execution on the web server.

EPSS

Процентиль: 62%
0.00429
Низкий

8.6 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
около 2 месяцев назад

Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload mechanism by creating a PHP shell with a command execution form that enables arbitrary system command execution on the web server.

CVSS3: 7.2
debian
около 2 месяцев назад

Serendipity 2.5.0 contains a remote code execution vulnerability that ...

EPSS

Процентиль: 62%
0.00429
Низкий

8.6 High

CVSS4

7.2 High

CVSS3

Дефекты

CWE-434