CVE-2023-31287

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-31287
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-31287.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-31287
Aliases
Published
2023-04-27T03:15:10.200Z
Modified
2026-04-10T04:58:09.289690Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the corresponding user. The token expires only 3 hours after issuance and is sent as a query parameter when resetting. An attacker with access to the browser history can thus use the token again to change the password in order to take over the account.

References

Affected packages

Git / github.com/serenity-is/serenity

Affected ranges

Type
GIT
Repo
https://github.com/serenity-is/serenity
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
11b9d267f840513d04b4f4d4876de7823a6e48d2
Type
GIT
Repo
https://github.com/serenity-is/serenity
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
11b9d267f840513d04b4f4d4876de7823a6e48d2

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "6.7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "6.7.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "6.7.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-31287.json"