CVE-2019-9926

概要

参考情報

• RhinoSecurityLabs/CVEs · Exploit
• rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce · Exploit

labkey server のその他の脆弱性

• CVE-2019-9758中 5.4An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators f…
• CVE-2019-9757高 7.5An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or …
• CVE-2019-3913中 4.9Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive…
• CVE-2019-3912中 6.1An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unaut…
• CVE-2019-3911中 6.1Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remo…