CVE-2023-53933
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
Résumé
Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- report exploit-db.com
- web docs.s9y.org