CVE-2019-3792

MEDIUM · CVSS 6.8 EPSS 1.09%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-04-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-3792

Severity

MEDIUM

CVSS

6.8

EPSS

1.09%

Original NVD Description

Pivotal Concourse version 5.0.0, contains an API that is vulnerable to SQL injection. An Concourse resource can craft a version identifier that can carry a SQL injection payload to the Concourse server, allowing the attacker to read privileged data.