CVE-2019-9757

PoC ×2—

CVSS 3.1

7.5 high

EPSS

37%p98

Published

Oct 29, 2019 (Oct 29, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XXE payload to the endpoint visualization-exportImage.view or visualization-exportPDF.view allows local files to be read.

Vendors: labkey
Products: labkey server
Weakness: CWE-611
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (37.3%)

In the news0 stories

No ingested article mentions this CVE yet.