VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 31, 2019· Updated Jun 17, 2026

CVE-2019-12273

CVE-2019-12273

Description

OutSystems Platform 10 through 11 allows ImageResourceDetail.aspx CSRF for content modifications and file uploads. NOTE: The product is self-hosted by the customer, even though it has a *.outsystemsenterprise.com domain name.) NOTE: The vendor claims that the independent researcher created the report without any type of validation and that no such vulnerability exists

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • OutSystems/OutSystems2 versions
    cpe:2.3:a:outsystems:outsystems:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:outsystems:outsystems:*:*:*:*:*:*:*:*range: >=10,<=11
    • (no CPE)range: 10 - 11
  • OutSystems/OutSystems Platformdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.