CVE-2019-19856

Mô tả

Tham khảo

• SerpicoProject/Serpico commit 270f05c · Patch
• websec.nl/news.php · Third Party Advisory

Lỗ hổng khác của serpico

• CVE-2020-12687TRUNG BÌNH 6.5An issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be requested by non-admin authenticated users. Th…
• CVE-2019-19859TRUNG BÌNH 5.3An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via …
• CVE-2019-19858TRUNG BÌNH 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the au…
• CVE-2019-19857TRUNG BÌNH 6.5An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without prov…
• CVE-2019-19855TRUNG BÌNH 4.8An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_…