Back to Database
Status published
Critical
CVE-2019-19249
Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations....
Vulnerability Description
Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19249
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
querytreeapp
View all reports →Affected Software
querytree
Vulnerable Versions:
3.0.11, 3.0.13, 3.0.15, 3.0.17, 3.0.19, 3.0.21, 3.0.25, 3.0.27, 3.0.29, 3.0.31, 3.0.36, 3.0.39, 3.0.41, 3.0.43, 3.0.45, 3.0.49, 3.0.51, 3.0.53, 3.0.55, 3.0.57, 3.0.59, 3.0.61, 3.0.63, 3.0.65, 3.0.69, 3.0.71, 3.0.73, 3.0.76, 3.0.79, 3.0.83, 3.0.85, 3.0.88, 3.0.90, 3.0.92, 3.0.95, 3.0.97, 3.0.99
Timeline
Official Publish:
November 25th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.