Is CVE-2017-5609 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-5609 being exploited in the wild.

How severe is CVE-2017-5609?

High severity, with a CVSS score of 8.8, published 28 January 2017.

Is there a fix for CVE-2017-5609?

A patch was published on 2017-01-26: Fix released in version 2.1-rc1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2017-5609 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2017-5609?

Check whether you run Serendipity at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-5609: Serendipity SQL injection in include/functions_entries.inc.php

CVE-2017-5609 · Severity: high · CVSS 8.8 · Published 2017-01-28

Serendipity, a popular open-source weblog engine, contains a security vulnerability that could allow an authorized user to interfere with the underlying database. By exploiting this flaw, an attacker with a valid account could potentially view, modify, or delete sensitive information stored in the system's database. This could lead to unauthorized data access or a complete disruption of the blogging service.

Technologies: Serendipity. Vendors: Serendipity.

Quick answers

Is CVE-2017-5609 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-5609 being exploited in the wild.
How severe is CVE-2017-5609?: High severity, with a CVSS score of 8.8, published 28 January 2017.
Which products and versions are affected?: Serendipity 2.0.5.
Is there a fix for CVE-2017-5609?: A patch was published on 2017-01-26: Fix released in version 2.1-rc1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2017-5609 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2017-5609?: Check whether you run Serendipity at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in Serendipity version 2.0.5 within the 'include/functions_entries.inc.php' component. The flaw is caused by a failure to properly cast or sanitize the 'cat' parameter (representing categories) to an integer before using it in a database query. A remote attacker with authenticated access can exploit this by submitting specially crafted SQL commands through the affected parameter. Successful exploitation allows for arbitrary SQL execution, which can lead to full database compromise, including data exfiltration or modification. The issue was addressed in version 2.1-rc1 by implementing proper integer casting for category insertions.

Affected products

s9y Serendipity 2.0.5

Timeline

2017-01-26: patched: Fix released in version 2.1-rc1
2017-01-28: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.