CVE-2019-1010205

LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. The impact is: The vulnerability allows an attacker to access any file (with a fixed extension) on the server. The component is: A web-view renderer; details here: https://lgtm.com/projects/g/linagora/hublin/snapshot/af9f1ce253b4ee923ff8da8f9d908d02a8e95b7f/files/backend/webserver/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1. The attack vector is: Attacker sends a specially crafted HTTP request.

• CWE-22

• https://lgtm.com/projects/g/linagora/hublin/snapshot/af9f1ce253b4ee923ff8da8f9d908d02a8e95b7f/files/backend/webserver/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1Vendor Advisory
• https://lgtm.com/projects/g/linagora/hublin/snapshot/af9f1ce253b4ee923ff8da8f9d908d02a8e95b7f/files/backend/webserver/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1Vendor Advisory

Published

Jul 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1010199ServiceStack ServiceStack Framework 4.5.14 is affected by: C…
• CVE-2019-10102JetBrains Ktor framework (created using the Kotlin IDE templ…
• CVE-2019-1010200Voice Builder Prior to commit c145d4604df67e6fc625992412eef0…
• CVE-2019-1010201Jeesite 1.2.7 is affected by: SQL Injection. The impact is: …
• CVE-2019-1010202Jeesite 1.2.7 is affected by: XML External Entity (XXE). The…
• CVE-2019-1010204GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31…5.5
• CVE-2019-1010206OSS Http Request (Apache Cordova Plugin) 6 is affected by: M…5.9
• CVE-2019-1010207Genetechsolutions Pie Register 3.0.15 is affected by: Cross …
• CVE-2019-1010208IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1…
• CVE-2019-1010209GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affect…
• CVE-2019-1010218Cherokee Webserver Latest Cherokee Web server Upto Version 1…7.5
• CVE-2019-1010220tcpdump.org tcpdump 4.9.2 is affected by: CWE-126: Buffer Ov…