CVE-2018-19133

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Nov 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-191347.8In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript documenCVE-2018-191358.8ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform CVE-2018-191366.1DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter.CVE-2018-191376.1DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter.CVE-2018-191388.8WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.CVE-2018-191395.5An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.CVE-2018-19145.4IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embedCVE-2018-191414.8Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL beCVE-2018-191424.8Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL.CVE-2018-191436.5Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete fCVE-2018-191456.1An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter.CVE-2018-191464.8Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HTML data with a SCRIPT