CVE-2019-3912 - AskarLabs CVE Database

CVE-2019-3912

Vendor Tenable

Product LabKey Server Community Edition

Weakness CWE-601 · Open redirect

Published January 30, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 via the /__r1/ returnURL parameter allows an unauthenticated remote attacker to redirect users to arbitrary web sites.

Key dates

02Disclosure timeline

January 30, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-3912 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/601.html

Related vulnerabilities

04Related CVE

CVE-2026-10861 MISP post-login open redirect via pre_login_requested_url CVE-2023-32218 Avaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-2824 IBM Operational Decision Manager HTTP open redirect CVE-2024-27291 Docassemble open redirect CVE-2026-25651 client-certificate-auth has an Open Redirect via Host Header Injection in HTTP-to-HTTPS redirect