CVE-2019-8932

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Jul 17, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-89338.8In DedeCMS 5.7SP2, attackers can upload a .php file to the uploads/ directory (without being blocked by the Web Application Firewall), and tCVE-2019-89343.3hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/devCVE-2019-89355.4Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.CVE-2019-89367.5NTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-89376.1HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizzCVE-2019-89386.1VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter.CVE-2019-89396.1data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the HistoryCVE-2019-89428.8WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an aCVE-2019-89436.5WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (who has privileges to crop an image) can write the output imaCVE-2019-89446.5An Information Exposure issue in the Terraform deployment step in Octopus Deploy before 2019.1.8 (and before 2018.10.4 LTS) allows remote auCVE-2019-89456.1Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.CVE-2019-89466.1Zimbra Collaboration 8.7.x - 8.8.11P2 contains persistent XSS.
CVE-2019-8932: High severity, CVSS 7.5 | Vulnix