CVE-2019-19946: Dradisframework Dradis

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this user is not part of the project team.

Affected products

• Dradisframework Dradis: version 3.4.1 only

Published 2020-03-16. Last modified 2026-06-17.