CVE-2019-1020009

HighCVSS 7.5/10Last modified Jun 17, 2026

Related CVEs from 2019

CVE-2019-10200106.1Misskey before 10.102.4 allows hijacking a user's token.CVE-2019-10200117.2SmokeDetector intentionally does automatic deployments of updated copies of SmokeDetector without server operator authority.CVE-2019-10200127.5parse-server before 3.4.1 allows DoS after any POST to a volatile class.CVE-2019-10200135.3parse-server before 3.6.0 allows account enumeration.CVE-2019-10200145.5docker-credential-helpers before 0.6.3 has a double free in the List functions.CVE-2019-10200157.5graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.CVE-2019-10200166.1ASH-AIO before 2.0.0.3 allows an open redirect.CVE-2019-10200175.3Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via a user-api OTP.CVE-2019-10200187.3Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a confirmation screen when logging in via an email link.CVE-2019-10200196.1invenio-previewer before 1.0.0a12 allows XSS.CVE-2019-102018.1It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML CVE-2019-102029.8A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-
CVE-2019-1020009: High severity, CVSS 7.5 | Vulnix