CVE-2019-19859

An issue was discovered in Serpico aka SimplE RePort wrIting and CollaboratiOn tool 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database...

CVE-2019-19859

The CVE-2019-19859 entry concerns Serpico (SimplE RePort wrIting and CollaboratiOn tool) version 1.3.0. The vulnerability is described as an input validation error in the Add Collaborator feature, where the author parameter allows unlimited data to be submitted even if it does not match existing ...