Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Labkey Clear all filters
TI-2019-02919 CVE-2019-3913 · GHSA-376f-mcx4-5jxg

Command injection in Tenable LabKey Server Community Edition

Priority LOW 26

Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of service.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01738 Published 2019-01-30 Fixed in 18.3.0-61806.763 CWE-77
TI-2019-02918 CVE-2019-3912 · GHSA-8pq2-wp8v-hcwc

Open redirect in Tenable LabKey Server Community Edition

Priority LOW 35

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04966 Published 2019-01-30 Fixed in 18.3.0-61806.763 CWE-601
TI-2019-02917 CVE-2019-3911 · GHSA-2x5v-3qcr-cj3f

Cross-site scripting in Tenable LabKey Server Community Edition

Priority LOW 34

Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03771 Published 2019-01-30 Fixed in 18.3.0-61806.763 CWE-79