CVE-2019-11492: ProjectSend

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

ProjectSend before r1070 writes user passwords to the server logs.

Affected products

• ProjectSend ProjectSend: before 1070 (fixed in 1070)

Published 2019-04-26. Last modified 2026-06-17.