Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

s9y/Serendipity

              master @ 742b12e
            

153

Fixes

CVEs

CRITICAL

Peak severity

16.2%

Coverage

Highlights

Auth Bypass: 28 prior fixes. Scrutinize any change in this area.

include/functions_images.inc.php: most-fixed (18 issues). Treat as high-risk during review.

57 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: A critical Remote File Inclusion (RFI) vulnerability was found in the installer due to dynamic path resolution that utilized untrusted POST inputs to include database initialization files. This allowed arbitrary PHP execution on the server.

Arbitrary File Upload: Incomplete sanitization filters and bypassable regular expressions in filename checks allowed attackers to upload and execute arbitrary PHP scripts, particularly via double-extension, Windows trailing-dot, or '.pht' extension bypasses.

Auth Bypass: Low-privileged users could modify restricted configuration flags through their personal settings page because the settings processor failed to skip 'dangerous' parameters during user variable updates.