CVE-2019-9758
An issue was discovered in LabKey Server 19.1.0. The display name of a user is vulnerable to stored XSS that can execute on administrators from security/permissions.view, security/addUsers.view, or wiki/Administration/page.view in the admin panel, leading to privilege escalation.
- Affected products
- Labkey Server
- Labkey Labkey Server
- = 19.1.0
- CVSS 3.1
- 5.4 MEDIUM
- EPSS
- 1.0% (61th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2019-10-29
CVE-2019-9758 at NVD
1 known exploit for CVE-2019-9758
Proof-of-concept code and exploit modules indexed by Sploitus