← Back to CVE List

CVE-2019-9757

Published: 2019-10-29T19:15Z
Last Modified: 2024-11-21T04:52Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt