CVE-2019-19249

{"id": "CVE-2019-19249", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2019-11-25T17:15:11.993", "references": [{"url": "https://github.com/d4software/QueryTree/commit/57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/d4software/QueryTree/compare/3.0.97-beta...3.0.99-beta", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/d4software/QueryTree/commit/57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/d4software/QueryTree/compare/3.0.97-beta...3.0.99-beta", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations."}, {"lang": "es", "value": "El archivo Controllers/InvitationsController.cs en QueryTree versiones anteriores a 3.0.99-beta, maneja inapropiadamente las invitaciones."}], "lastModified": "2026-06-17T02:26:22.053", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.11:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE044E4F-A82B-4281-A2B1-0441CA01BA0A"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.13:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E845AEF7-9F32-4D28-940F-8A7C5A46EF28"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.15:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52671540-55F6-45F4-BD88-DB10FBA0DD3C"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.17:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94C5DE7B-31B6-4B1A-B057-0C8CB6D2CDCB"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.19:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBAEF7D7-0E89-4A37-892D-641A5E94CF71"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.21:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8607862C-4D4A-46B9-A9B6-F00E4BA367C9"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.25:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "649F5EB4-99BF-44D2-AF30-E8AE4464C266"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.27:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A4DDD13-DE67-4528-97D5-B2361512190E"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.29:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B1E88E9-0A7D-483A-8049-DA2EDBD73450"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.31:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69027D6B-1699-4518-8054-DCA774BE3C1F"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.36:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D53F0638-2334-4C71-ABF1-80F8FAB67E37"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.39:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06B14047-2F27-4A42-8325-2F06A5FC70B1"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.41:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF9DED87-E033-48F0-AF5E-4ADD5472093E"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.43:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD46A2C7-7669-445B-BDBB-BC1EDD4DF999"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.45:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA7A984C-6583-4902-ADE2-FE04F3ABEF64"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.49:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67AED30C-10F5-49ED-B1CD-BA1896B9739C"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.51:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60E43823-A99E-495D-B6C4-196580A56054"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.53:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1268572-69A5-464F-B593-5286AB7284EC"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.55:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3ACCAB9C-CB42-4707-A988-1F9D4D1FD4EA"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.57:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A3108B6-2DCF-4326-B87B-CABBBDDA620B"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.59:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EB89C9C-B804-49A3-AAAF-091FD9C5A839"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.61:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A4D7A7B-B206-4158-984B-F6ED985B7AD6"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.63:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B575649B-B1F7-4D78-AEDF-2E5C9E0C2ED7"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.65:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2A91470-28DC-4196-ABB7-4D130DF5BA0B"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.69:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A679FC1-3772-4D78-95B4-E8EBD0E76AD2"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.71:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12F38033-25B4-4203-81DB-ABC95CA7871F"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.73:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FCC7C99-C3AF-48CE-AEA7-13218BE65BDD"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.76:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2BBC8EB-8F92-4EF8-A335-0A7EA55094C1"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.79:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "782A69B1-ABAA-4C87-BF44-EDD103275005"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.83:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CE2FF03-A81D-48E5-8CD4-F785905C1185"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.85:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BC435AD-AB9D-4A6F-842B-C3AD72E8C755"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.88:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0D6EF23-22BD-454F-B61E-43AF111E90B5"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.90:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E1F9857-1D62-4DDF-97B4-90D980EBCDD3"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.92:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16964FA5-0107-4B06-9B23-5401A93B00D7"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.95:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1535DB6-282A-4079-A6A3-5153E2995978"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.97:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0ACC6F58-93C4-45D9-90AA-36C63AC77D7A"}, {"criteria": "cpe:2.3:a:querytreeapp:querytree:3.0.99:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99B41850-732B-4EF5-91A4-5DB8EA65B351"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}