CVE-2019-19859

5.3 mediumEPSS 0.8%

Medium (5.3) in serpico project serpico. EPSS 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
Published: 2020-01-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

serpico_project:serpico

References

https://www.websec.nl/news.php
https://www.websec.nl/news.php

Check your stack JSON