CVE-2019-19249
Summary
| CVE | CVE-2019-19249 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-11-25 17:15:00 UTC |
| Updated | 2019-12-11 20:16:00 UTC |
| Description | Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Querytreeapp | Querytree | 3.0.11 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.13 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.15 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.17 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.19 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.21 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.25 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.27 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.29 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.31 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.36 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.39 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.41 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.43 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.45 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.49 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.51 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.53 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.55 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.57 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.59 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.61 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.63 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.65 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.69 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.71 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.73 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.76 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.79 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.83 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.85 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.88 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.90 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.92 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.95 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.97 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.99 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.11 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.13 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.15 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.17 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.19 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.21 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.25 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.27 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.29 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.31 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.36 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.39 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.41 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.43 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.45 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.49 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.51 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.53 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.55 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.57 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.59 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.61 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.63 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.65 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.69 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.71 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.73 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.76 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.79 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.83 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.85 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.88 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.90 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.92 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.95 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.97 | beta | All | All |
| Application | Querytreeapp | Querytree | 3.0.99 | beta | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Fixing security vunerability · d4software/QueryTree@57b7008 · GitHub | MISC | github.com | Patch |
| Comparing 3.0.97-beta...3.0.99-beta · d4software/QueryTree · GitHub | MISC | github.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.