CVE-2019-1020007: owasp dependency-track – CVSS 5.4 · Watchpost

← All vulnerabilities

CVE-2019-1020007

中危 5.4CVE-2019-1020007 · Published 29/07/2019 · updated 17/06/2026

要点

CVE-2019-1020007 是影响 dependency-track (owasp) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.65%，高于 50.9% 的漏洞。
修复：升级到 3.5.1 或更高版本。

Package	Affected versions	Patched versions
dependency-track owasp	`< 3.5.1`	`3.5.1`

Description

Dependency-Track before 3.5.1 allows XSS.

References

DependencyTrack/dependency-track security advisory · Third Party Advisory

dependency-track 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free