CVE-2019-19859: Serpico Project Serpico

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The Add Collaborator allows unlimited data via the author parameter, even if the data does not match anything in the database.

Affected products

• Serpico Project Serpico: version 1.3.0 only

Published 2020-01-15. Last modified 2026-06-17.