VULNERABILITY INTELLIGENCE

CVE-2019-14551

CVSS score9.8 CRITICAL
EPSS probability1.14%
CISA KEVNot currently listed
Published2019-08-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Das Q before 2019-08-02 allows web sites to execute arbitrary code on client machines, as demonstrated by a cross-origin /install request with an attacker-controlled releaseUrl, which triggers download and execution of code within a ZIP archive.

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references