CVE-2019-1020019

invenio-previewer before 1.0.0a12 allows XSS.

• CWE-79

• https://github.com/inveniosoftware/invenio-previewer/security/advisories/GHSA-j9m2-6hq2-4r3cExploit, Mitigation, Third Party Advisory
• https://github.com/inveniosoftware/invenio-previewer/security/advisories/GHSA-j9m2-6hq2-4r3cExploit, Mitigation, Third Party Advisory

Published

Jul 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1020013parse-server before 3.6.0 allows account enumeration.
• CVE-2019-1020014docker-credential-helpers before 0.6.3 has a double free in …5.5
• CVE-2019-1020015graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta…
• CVE-2019-1020016ASH-AIO before 2.0.0.3 allows an open redirect.
• CVE-2019-1020017Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a …5.3
• CVE-2019-1020018Discourse before 2.3.0 and 2.4.x before 2.4.0.beta3 lacks a …7.3
• CVE-2019-10201It was found that Keycloak's SAML broker, versions up to 6.0…8.1
• CVE-2019-10202A series of deserialization vulnerabilities have been discov…9.8
• CVE-2019-10203PowerDNS Authoritative daemon , pdns versions 4.0.x before 4…4.3
• CVE-2019-10204Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-10205A flaw was found in the way Red Hat Quay stores robot accoun…6.3
• CVE-2019-10206ansible-playbook -k and ansible cli tools, all versions 2.8.…6.5