Command manipulation in LabKey Server Community Edition before 18.3.0-61806.763 allows an authenticated remote attacker to unmount any drive on the system leading to denial of service.
References
Link | Resource |
---|---|
https://www.tenable.com/security/research/tra-2019-03 | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-01-30 12:29
Updated : 2021-11-02 13:16
NVD link : CVE-2019-3913
Mitre link : CVE-2019-3913
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
labkey
- labkey_server