CVE-2019-19855

Description

References

• SerpicoProject/Serpico commit 270f05c · Patch
• websec.nl/news.php · Third Party Advisory

Más vulnerabilidades de serpico

• CVE-2020-12687MEDIO 6.5An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin authenticated users. Th…
• CVE-2019-19859MEDIO 5.3An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via …
• CVE-2019-19858MEDIO 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the au…
• CVE-2019-19857MEDIO 6.5An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without prov…
• CVE-2019-19856MEDIO 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allow…