Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2019-19946] Dradis Pro Version 3.4.1

bishopfox.com | vulnerability | CVE-2019-19946 | #api-security | #idor | #advisory | #dradis | #cve-2019-19946

Summary

Advisory on CVE-2019-19946: an IDOR in Dradis Pro 3.4.1's API let any user read other projects' content and vulnerability details; fixed in 3.5.0.
Published
Collected

original ↗

Related coverage

  1. API Vulnerability Scanner: What to Automate and What to Validate Manually (bugbunny.ai)
  2. Insecure Direct Object Reference: The Authorization Bug Hiding in Plain Sight (bugbunny.ai)
  3. OpenEMR 5.0.1(6) - RCE and XSS (bishopfox.com)
  4. Windows DNS Client – Memory Corruption Vulnerabilities (bishopfox.com)
  5. SolarWinds Log & Event Manager - Improper Access Control (bishopfox.com)
  6. SolarWinds Log & Event Manager - Arbitrary Command Injection (bishopfox.com)

back