CVE-2019-19857

CVE-2019-19857 describes a medium-severity vulnerability in Serpico 1.3.0, where an administrator can change their password without providing the current password through interfaces outside the designated "Change Password" screen. This flaw, rated 6.5 CVSS, is problematic when combined with XSS, allowing an attacker to potentially compromise admin accounts. While the attack vector is network-based with low complexity, it requires user interaction and could lead to high integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.