CVE-2019-19379

MediumCVSS 5.3/10Last modified Jun 22, 2026

Description

In app/Controller/TagsController.php in MISP 2.4.118, users can bypass intended restrictions on tagging data.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Nov 28, 2019
Last modified
Jun 22, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-19389.8A vulnerability in the web-based management interface of Cisco UCS Director and Cisco UCS Director Express for Big Data could allow an unautCVE-2019-193816.1oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site ScriCVE-2019-193827.8Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll filCVE-2019-193838.8freeFTPd 1.0.8 has a Post-Authentication Buffer Overflow via a crafted SIZE command (this is exploitable even if logging is disabled).CVE-2019-193846.1A cross-site scripting (XSS) vulnerability in app/fax/fax_log_view.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary web scCVE-2019-193856.1A cross-site scripting (XSS) vulnerability in app/dialplans/dialplans.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrary webCVE-2019-193866.1A cross-site scripting (XSS) vulnerability in app/voicemail_greetings/voicemail_greeting_edit.php in FusionPBX 4.4.1 allows remote attackersCVE-2019-193876.1A cross-site scripting (XSS) vulnerability in app/fifo_list/fifo_interactive.php in FusionPBX 4.4.1 allows remote attackers to inject arbitrCVE-2019-193886.1A cross-site scripting (XSS) vulnerability in app/dialplans/dialplan_detail_edit.php in FusionPBX 4.4.1 allows remote attackers to inject arCVE-2019-193895.4JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting.CVE-2019-19398.8A vulnerability in the Cisco Webex Teams client for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands onCVE-2019-193905.4The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters t
CVE-2019-19379: Medium severity, CVSS 5.3 | Vulnix