CVE-2019-11870

MEDIO 6.1CVE-2019-11870 · Published 09/05/2019 · updated 17/06/2026

En resumen

CVE-2019-11870 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a serendipity (s9y).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 70.3% de las vulnerabilidades.
Solución: actualizar a 2.1.5 o posterior.

Package	Affected versions	Patched versions
serendipity s9y	`< 2.1.5`	`2.1.5`

Description

Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/media_choose.tpl Editor Preview feature or the templates/2k11/admin/media_items.tpl Media Library feature.

References

openwall.com/lists/oss-security/2019/05/10/1 · Mailing List
blog.s9y.org/archives/282-Serendipity-2.1.5-released.html · Release Notes
s9y/Serendipity · Third Party Advisory
openwall.com/lists/oss-security/2019/05/03/3 · Mailing List

Más vulnerabilidades de serendipity

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

serendipity

s9y

< 2.1.5

2.1.5

Más vulnerabilidades de serendipity

Ver todo →