CVE-2019-3911CWE-79

CVE-2019-3911: vulnerability in Tenable LabKey Server Community Edition

Published · Updated

Follow this CVE+ Monitor LabKey Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 3.8%
Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query endpoints.
Affected products
Tenable · LabKey Server Community Edition
Related CVEs — Tenable LabKey Server Community Edition

In the same product, most dangerous first.

CVE-2019-3912—CVE-2019-3912EPSS 5.0%CVE-2019-3913—CVE-2019-3913EPSS 1.7%