| Package | Affected versions | Patched versions |
|---|---|---|
| labkey server | = 19.1.0 |
An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free