Serenity / StartSharp Software File Upload / XSS / User Enumeration / Reusable Tokens

SEC Consult Vulnerability Lab Security Advisory < 20230516-0 >=======================================================================title: Multiple Vulnerabilitiesproduct: Serenity and StartSharp Softwarevulnerable version: < 6.7.1fixed version: 6.7.1 or higherCVE number: CVE-2023-31285, CVE-2023-31286, CVE-2023-31287impact: highhomepage: https://serenity.isfound: 2023-02-28by: Fabian Densborn (Office Vienna)SEC Consult Vulnerability LabAn integrated part of SEC Consult.SEC Consult is part of Eviden, an Atos businessEurope | Asia | North Americahttps://www.sec-consult.com=======================================================================Vendor description:-------------------Serenity

Related Keywords

United States ,America ,Fabian Densborn ,Sec Consult Vulnerability Lab Security Advisory ,Vulnerability Lab ,Twitter ,Startsharp Software ,Reusable Password Reset Tokens ,