CVE-2019-9926

Description

References

• RhinoSecurityLabs/CVEs · Exploit
• rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce · Exploit

Weitere Schwachstellen in labkey server

• CVE-2019-9758MITTEL 5.4An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators f…
• CVE-2019-9757HOCH 7.5An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or …
• CVE-2019-3913MITTEL 4.9Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive…
• CVE-2019-3912MITTEL 6.1An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unaut…
• CVE-2019-3911MITTEL 6.1Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remo…