---
id: 4171
title: "[CVE-2019-19946] Dradis Pro Version 3.4.1"
cve: CVE-2019-19946
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/dradis-pro-3-4-1-advisory"
published_at: "2019-12-30T00:00:00Z"
tags: ["api-security", "idor", "advisory", "dradis", "cve-2019-19946"]
phying_url: "https://phying.com/item/4171"
lang: en
---

# [CVE-2019-19946] Dradis Pro Version 3.4.1

## Summary

Advisory on CVE-2019-19946: an IDOR in Dradis Pro 3.4.1's API let any user read other projects' content and vulnerability details; fixed in 3.5.0.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2019-19946
- **Published:** 2019-12-30T00:00:00Z
- **Original:** https://bishopfox.com/blog/dradis-pro-3-4-1-advisory
- **Phying News:** https://phying.com/item/4171