Description
An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewScriptReport.view CSRF vulnerability.
Unscored
CVE-2019-9926
EUVD-2019-19281GHSA-5r57-qcrv-6x2j
An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewS…
Published Oct 29, 2019 · Updated Aug 4, 2024 · Assigned by mitre