5.3
CVE-2019-19859
- EPSS 0.24%
- Veröffentlicht 15.01.2020 23:15:11
- Zuletzt bearbeitet 21.11.2024 04:35:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Serpico Project ≫ Serpico Version1.3.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.439 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|