Lucene search

K

Labkey Server Community Edition Security Vulnerabilities

cve
cve

CVE-2019-3911

Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query...

6.1CVSS

6AI Score

0.002EPSS

2019-01-30 08:29 PM
30
cve
cve

CVE-2019-3912

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web...

6.1CVSS

6.3AI Score

0.002EPSS

2019-01-30 08:29 PM
18
cve
cve

CVE-2019-3913

Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of...

4.9CVSS

5.1AI Score

0.005EPSS

2019-01-30 08:29 PM
24