CVE-2023-53933
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
概要
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web docs.s9y.org