CVE-2019-13175
UnknownEPSS 0.90%
Last modified
CVE-2019-13175 is a vulnerability of currently unknown severity. Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites).. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites).
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Readthedocs | Read The Docs | < 3.5.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-13175?
Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs (in addition to the public readthedocs.org web sites).
How severe is CVE-2019-13175?
Severity scoring for CVE-2019-13175 is pending analysis. The EPSS model estimates a 0.90% probability of exploitation in the next 30 days.
How do I fix CVE-2019-13175?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-13169Some Xerox printers (such as the Phaser 3320 V53.006.16.000)…9.8
- CVE-2019-1317A denial of service vulnerability exists when Windows improp…7.3
- CVE-2019-13170Some Xerox printers (such as the Phaser 3320 V53.006.16.000)…6.5
- CVE-2019-13171Some Xerox printers (such as the Phaser 3320 V53.006.16.000)…9.8
- CVE-2019-13172Some Xerox printers (such as the Phaser 3320 V53.006.16.000)…9.8
- CVE-2019-13173fstream before 1.0.12 is vulnerable to Arbitrary File Overwr…
- CVE-2019-13176An issue was discovered in the 3CX Phone system (web) manage…
- CVE-2019-13177verification.py in django-rest-registration (aka Django REST…
- CVE-2019-13178modules/luksbootkeyfile/main.py in Calamares versions 3.1 th…
- CVE-2019-13179Calamares versions 3.1 through 3.2.10 copies a LUKS encrypti…
- CVE-2019-1318A spoofing vulnerability exists when Transport Layer Securit…5.9
- CVE-2019-13181A CSV injection vulnerability exists in the web UI of SolarW…6.5
Are you affected by CVE-2019-13175?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST