serenity records

4 published records for vendor serenity.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2023-31287No exploit	An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.serenity · serene · CWE-640	High7.8	—	0.4%	Apr 26, 2023
24Monitor	CVE-2023-31285No exploit	An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.serenity · serene · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Apr 26, 2023
24Monitor	CVE-2024-26318No exploit	Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.serenity · serenity · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Feb 19, 2024
21Monitor	CVE-2023-31286No exploit	An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.serenity · serene · CWE-209 Pre-auth Info leak	Medium5.3	—	1.0%	Apr 26, 2023

CVE-2023-31287
31Monitor
An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.
HighCVSS 7.8No exploitEPSS 0%
serenity · sereneApr 26, 2023
CVE-2023-31285
24Monitor
An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
serenity · sereneApr 26, 2023
CVE-2024-26318
24Monitor
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
serenity · serenityFeb 19, 2024
CVE-2023-31286
21Monitor
An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Info leak
serenity · sereneApr 26, 2023