CVE-2019-3912

Published: 2019-01-30T20:29Z

Last Modified: 2024-11-21T04:42Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt