CVE-2019-3913

概要

参考情報

• tenable.com/security/research/tra-2019-03 · Exploit

labkey server のその他の脆弱性

• CVE-2019-9926高 8.8An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewSc…
• CVE-2019-9758中 5.4An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators f…
• CVE-2019-9757高 7.5An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or …
• CVE-2019-3912中 6.1An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unaut…
• CVE-2019-3911中 6.1Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remo…