{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "versions": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.11-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.13-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.15-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.17-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.19-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.21-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.25-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.27-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.29-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.31-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.36-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.39-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.41-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.43-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.45-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.49-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.51-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.53-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.55-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.57-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.59-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.61-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.63-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.65-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.69-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.71-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.73-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.76-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.79-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.83-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.85-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.88-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.90-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.92-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.95-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.97-beta"
              },
              {
                "introduced": "0"
              },
              {
                "last_affected": "3.0.99-beta"
              }
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "1751f9001a86ade39035740572fed694386e9ce9"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "0c8a70e4f61b27c9180b98262fe4090504da5709"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c96994209daf3392e1ab80704a114e2e1404d055"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "043a5aa7bc91c43952cdc954942456b80aafe648"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "134af74f8e24ed850326b3ad411be60e47beb3f8"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "043a4d505db078f0e88754c7ae2eb74b68c65261"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "0c9f504cb7722ef616978402ae77964ed7a6f4e8"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5206459c443c57976bd9f7931ae9f94d8d49215c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "b631e0be4a2305dd87ea94af1cc65372577c6811"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "f359ce6788f9c4254a78c7f70b7a5e19bffeebd2"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "3198503df1a4457f7894b0784bf4fb6827400d81"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5ef985da685483d5ea15a970eae53baf565be732"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "73f85392e29ccf78ab79b7fb907f3b0e13fbe4c0"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "6c0fca0924bd1001fc40acedf3a2de7fa40242d9"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "5696da6ebe48a1a043537cacb6a96896e36035c1"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "480cac9d256bfabe42c515e43d95d0c1bdf15a0e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "9f3480e91718285618a0aca662d02fb555572a31"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "ee0c228d17ad62c6a18ee5ec5d7a88f7d5bb2774"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "4286b77facb038000dfc600bcdc7af4a1351ad2c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "f46c1e2679b8cf77bb894b836d2ff6ee32b1bdb4"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "8f0f64b0a4a930f4788cf9f986021bb73c44b589"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7e0bac0a5d5cbd08ae659b5b79d31f938bcd8240"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "dbeaeaed717280a1aef3e7d8f7fa3ff2e7b65756"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "4ab96a3e54f47365c25df639ee6158d275d4d77b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "64907193d08771ebdfb59bc652a98ee42f363f83"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "2b6a85f05190ff5c5914393388a7b9efd95ca6d4"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "494b1f2b016cac1045fa381b13ea68a2f419a34b"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "a6ba5836233e1647b9426cc801a6b9b4043a4999"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "021242272b3875163dc18981f43d9e1359676a2e"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "7dd4d764760681b7adb010dd91ce6dd512cfd34c"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "39c12685fe852521744b4525999f699499097542"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "cc82b46ce247da35a99e51d6c149009d2407bb24"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "2ca64277008f293e346b165696799078b5661437"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "c9dd4bfdf25e57dc4607d5555c7db86b5f292215"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "cb9bb2134c6a3dc645d5f09c3efcc6cc82c99a13"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "4fcb2ff6c0b0fbbbbf1edbc9153bd16b1e8ba753"
            },
            {
              "introduced": "0"
            },
            {
              "last_affected": "57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f"
            },
            {
              "fixed": "57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f"
            }
          ],
          "repo": "https://github.com/d4software/querytree",
          "type": "GIT"
        }
      ]
    }
  ],
  "details": "Controllers/InvitationsController.cs in QueryTree before 3.0.99-beta mishandles invitations.",
  "id": "CVE-2019-19249",
  "modified": "2026-03-13T21:51:38.529831004Z",
  "published": "2019-11-25T17:15:11.993Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/d4software/QueryTree/compare/3.0.97-beta...3.0.99-beta"
    },
    {
      "type": "FIX",
      "url": "https://github.com/d4software/QueryTree/commit/57b700823f8eb1a42eb3bc0c706fbe5e5f5e766f"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}