Serpico Project Serpico 1.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:serpico_project:serpico:1.3.0:*:*:*:*:*:*:*part: a version: 1.3.0 update: *
| Vendor | Serpico Project (f7f34733-5517-5a88-ae39-a1440c5bfad9) |
|---|---|
| Product | Serpico (9e30521b-9371-5c12-8989-2f2b82407a07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/serpico/serpico |
purl2cpe | 2026-06-01 10:11:16.003144 |
pkg:github/serpicoproject/serpico |
purl2cpe | 2026-06-01 10:11:16.003147 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-19859 |
vulnerable | 2026-06-08 05:13:23.900549 |
Details available
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database.
Published: 2020-01-15T22:43:59.000Z
Updated: 2024-08-05T02:32:08.912Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19858 |
vulnerable | 2026-06-08 05:13:23.900183 |
Details available
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the author parameter.
Published: 2020-01-15T22:46:09.000Z
Updated: 2024-08-05T02:32:08.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19857 |
vulnerable | 2026-06-08 05:13:23.899766 |
Details available
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the Change Password screen. Thus, requiring the admin to enter an Old Password value on the Change Password screen does not enhance security. This is problematic in conjunction with XSS.
Published: 2020-01-15T22:47:27.000Z
Updated: 2024-08-05T02:32:08.894Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19856 |
vulnerable | 2026-06-08 05:13:23.899385 |
Details available
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allows stored XSS via the type parameter.
Published: 2020-01-15T22:49:10.000Z
Updated: 2024-08-05T02:25:12.704Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19855 |
vulnerable | 2026-06-08 05:13:23.898942 |
Details available
An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_type parameter.
Published: 2020-01-15T22:50:28.000Z
Updated: 2024-08-05T02:25:12.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19854 |
vulnerable | 2026-06-08 05:13:23.898336 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.