CVE-2024-58282

Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload mechanism by creating a PHP shell with a command execution form that enables arbitrary system command execution on the web server.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://docs.s9y.org/	Product
https://www.exploit-db.com/exploits/52036	Exploit Third Party Advisory
https://www.s9y.org/latest	Product
https://www.vulncheck.com/advisories/serendipity-remote-code-execution-via-authenticated-media-upload	Third Party Advisory
https://www.s9y.org/latest	Product

Configurations

Configuration 1 (hide)

cpe:2.3:a:s9y:serendipity:2.5.0:*:*:*:*:*:*:*

History

26 Sep 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Serendipity 2.5.0 contiene una vulnerabilidad de ejecución remota de código que permite a administradores autenticados subir archivos PHP maliciosos a través de la funcionalidad de carga de medios. Los atacantes pueden explotar el mecanismo de carga de archivos creando un shell PHP con un formulario de ejecución de comandos que permite la ejecución arbitraria de comandos del sistema en el servidor web.

Information

Published : 2025-12-10 22:16

Updated : 2026-09-26 21:10

NVD link : CVE-2024-58282

Mitre link : CVE-2024-58282

CVE.ORG link : CVE-2024-58282

JSON object : View

Products Affected

s9y

serendipity

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2024-58282", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-58282", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-11T15:45:44.516499Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Serendipity", "product": "Serendipity", "versions": [{"status": "affected", "version": "2.5.0"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-10T22:16:20.100", "references": [{"url": "https://docs.s9y.org/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/52036", "tags": ["Exploit", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.s9y.org/latest", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/serendipity-remote-code-execution-via-authenticated-media-upload", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.s9y.org/latest", "tags": ["Product"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload mechanism by creating a PHP shell with a command execution form that enables arbitrary system command execution on the web server."}, {"lang": "es", "value": "Serendipity 2.5.0 contiene una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo que permite a administradores autenticados subir archivos PHP maliciosos a trav\u00e9s de la funcionalidad de carga de medios. Los atacantes pueden explotar el mecanismo de carga de archivos creando un shell PHP con un formulario de ejecuci\u00f3n de comandos que permite la ejecuci\u00f3n arbitraria de comandos del sistema en el servidor web."}], "lastModified": "2026-09-26T21:10:00.130", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:s9y:serendipity:2.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCA82E21-E34F-4419-88EE-622C031237A0"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}