Approved changes feed: RSS · Atom

cpe:2.3:a:labkey:labkey_server:*:*:community:*:*:*:*:*

part: a version: * update: *

VendorLabkey (ceaeac2e-808f-5a2c-b1ce-78560539ef4f)
ProductLabkey Server (f398ae8d-5d47-5cd8-9137-5e731eef6ccb)
Editioncommunity
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/labkey/server purl2cpe 2026-06-01 10:17:50.353241

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3911 vulnerable 2026-06-08 05:13:56.413882 Details available
Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query endpoints.
Published: 2019-01-30T20:00:00.000Z
Updated: 2024-09-17T04:14:40.386Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.