CVE-2019-3912CWE-601

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote…

published January 30, 2019

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04966 · 92.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2019-01-30T20:00Z
EPSS history
Timeline
  • 30 JAN 20:00Z
    An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote…
    cvelistv5