Serendipity Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Serendipity version 2.4.0. This vulnerability allows authenticated attackers to upload malicious PHP files with a .phar extension through the media upload endpoint. Once uploaded, these files can execute arbitrary commands on the server.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Serendipity 2.4.0 is installed.

Reproduction

To reproduce this vulnerability, an authenticated user can upload a .phar file containing a PHP payload with system command instructions via the media upload endpoint. After uploading the file, it can be accessed through the uploads directory, where the embedded commands will be executed on the server.