{"id":"CVE-2019-19249","details":"Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.","modified":"2026-07-08T20:04:24.886749Z","published":"2019-11-25T17:15:11.993Z","references":[{"type":"ADVISORY","url":"https://github.com/d4software/QueryTree/compare/3.0.97-beta...3.0.99-beta"},{"type":"FIX","url":"https://github.com/d4software/QueryTree/commit/57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/d4software/querytree","events":[{"introduced":"1751f9001a86ade39035740572fed694386e9ce9"},{"last_affected":"57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f"},{"fixed":"57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f"}],"database_specific":{"extracted_events":[{"introduced":"3.0.11-beta"},{"last_affected":"3.0.11-beta"},{"introduced":"3.0.13-beta"},{"last_affected":"3.0.13-beta"},{"introduced":"3.0.15-beta"},{"last_affected":"3.0.15-beta"},{"introduced":"3.0.17-beta"},{"last_affected":"3.0.17-beta"},{"introduced":"3.0.19-beta"},{"last_affected":"3.0.19-beta"},{"introduced":"3.0.21-beta"},{"last_affected":"3.0.21-beta"},{"introduced":"3.0.25-beta"},{"last_affected":"3.0.25-beta"},{"introduced":"3.0.27-beta"},{"last_affected":"3.0.27-beta"},{"introduced":"3.0.29-beta"},{"last_affected":"3.0.29-beta"},{"introduced":"3.0.31-beta"},{"last_affected":"3.0.31-beta"},{"introduced":"3.0.36-beta"},{"last_affected":"3.0.36-beta"},{"introduced":"3.0.39-beta"},{"last_affected":"3.0.39-beta"},{"introduced":"3.0.41-beta"},{"last_affected":"3.0.41-beta"},{"introduced":"3.0.43-beta"},{"last_affected":"3.0.43-beta"},{"introduced":"3.0.45-beta"},{"last_affected":"3.0.45-beta"},{"introduced":"3.0.49-beta"},{"last_affected":"3.0.49-beta"},{"introduced":"3.0.51-beta"},{"last_affected":"3.0.51-beta"},{"introduced":"3.0.53-beta"},{"last_affected":"3.0.53-beta"},{"introduced":"3.0.55-beta"},{"last_affected":"3.0.55-beta"},{"introduced":"3.0.57-beta"},{"last_affected":"3.0.57-beta"},{"introduced":"3.0.59-beta"},{"last_affected":"3.0.59-beta"},{"introduced":"3.0.61-beta"},{"last_affected":"3.0.61-beta"},{"introduced":"3.0.63-beta"},{"last_affected":"3.0.63-beta"},{"introduced":"3.0.65-beta"},{"last_affected":"3.0.65-beta"},{"introduced":"3.0.69-beta"},{"last_affected":"3.0.69-beta"},{"introduced":"3.0.71-beta"},{"last_affected":"3.0.71-beta"},{"introduced":"3.0.73-beta"},{"last_affected":"3.0.73-beta"},{"introduced":"3.0.76-beta"},{"last_affected":"3.0.76-beta"},{"introduced":"3.0.79-beta"},{"last_affected":"3.0.79-beta"},{"introduced":"3.0.83-beta"},{"last_affected":"3.0.83-beta"},{"introduced":"3.0.85-beta"},{"last_affected":"3.0.85-beta"},{"introduced":"3.0.88-beta"},{"last_affected":"3.0.88-beta"},{"introduced":"3.0.90-beta"},{"last_affected":"3.0.90-beta"},{"introduced":"3.0.92-beta"},{"last_affected":"3.0.92-beta"},{"introduced":"3.0.95-beta"},{"last_affected":"3.0.95-beta"},{"introduced":"3.0.97-beta"},{"last_affected":"3.0.97-beta"},{"introduced":"3.0.99-beta"},{"last_affected":"3.0.99-beta"}],"source":["CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:querytreeapp:querytree:3.0.11:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.13:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.15:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.17:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.19:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.21:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.25:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.27:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.29:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.31:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.36:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.39:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.41:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.43:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.45:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.49:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.51:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.53:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.55:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.57:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.59:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.61:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.63:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.65:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.69:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.71:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.73:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.76:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.79:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.83:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.85:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.88:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.90:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.92:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.95:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.97:beta:*:*:*:*:*:*","cpe:2.3:a:querytreeapp:querytree:3.0.99:beta:*:*:*:*:*:*"]}}],"versions":["3.0.11-beta","3.0.13-beta","3.0.15-beta","3.0.17-beta","3.0.19-beta","3.0.21-beta","3.0.25-beta","3.0.27-beta","3.0.29-beta","3.0.31-beta","3.0.36-beta","3.0.39-beta","3.0.41-beta","3.0.43-beta","3.0.45-beta","3.0.49-beta","3.0.51-beta","3.0.53-beta","3.0.55-beta","3.0.57-beta","3.0.59-beta","3.0.61-beta","3.0.63-beta","3.0.65-beta","3.0.69-beta","3.0.71-beta","3.0.73-beta","3.0.76-beta","3.0.79-beta","3.0.83-beta","3.0.85-beta","3.0.88-beta","3.0.90-beta","3.0.92-beta","3.0.95-beta","3.0.97-beta","3.0.99-beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19249.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}