Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-3912

33
FAUCET Score

CVE-2019-3912 describes an open redirect vulnerability in LabKey Server Community Edition versions prior to 18.3.0-61806.763. An unauthenticated attacker can exploit this flaw by manipulating the returnURL parameter, redirecting users to arbitrary external websites. This medium-severity vulnerability has a CVSS score of 6.1, indicating low attack complexity and potential for limited impact on confidentiality and integrity, primarily through phishing or misleading users. While no active exploitation or Metasploit modules are reported, a Nuclei template exists for detection, and there is minimal community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 18.3.0-61806.763CPE matchmatch criteria
cpe:2.3:a:labkey:labkey_server:*:*:*:*:community:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.1MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
2.7
CvssVersion
3.1

Exploit Intelligence

EPSS Score
4.83%
Probability of exploitation in next 30 days
EPSS Percentile
91.1%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
Nuclei: CVE-2019-3912 · Feb 14, 2022
This CVE's current EPSS score of 0.0483 is in the 96th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (3)

dogukanurkervendor investigatingvia llm_extracted
posthogvendor investigatingvia llm_extracted
qlikvendor investigatingvia llm_extracted

Vendor Advisories (3)

dogukanurkerllm-dogukanurker-e6de585f08b942f3MEDIUM

LabKey Server Community Edition Multiple Vulnerabilities

Jan 24, 2019
qlikllm-qlik-51c9abbc9b00bba0MEDIUM

LabKey Server Community Edition Multiple Vulnerabilities

Jan 24, 2019
posthogllm-posthog-6da5340122e224d3MEDIUM

LabKey Server Community Edition Multiple Vulnerabilities

Jan 24, 2019

References

tenable.com / security/research/tra-2019-03
ExploitThird Party Advisory