CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java. It may be remotely exploitable.
CVE
CVE-2019-3911
Severity
MEDIUM
CVSS
6.1
EPSS
3.81%
Java
Original NVD Description
Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Edition before 18.3.0-61806.763 allows an unauthenticated remote attacker to inject arbitrary javascript via the onerror parameter in the /__r2/query endpoints.
Related CVEs
Other vulnerabilities affecting the same vendor(s)