{"id":"CVE-2019-0017","aliases":["EUVD-2019-0824","GHSA-v5hc-28pc-qw2m"],"status":"published","title":"Junos Space: Unrestricted file upload vulnerability","description":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01101,"percentile":0.65916,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-434"],"published":"2019-01-15T21:00:00Z","modified":"2026-06-17T02:07:31Z","products":[{"vendor":"juniper","product":"junos_space"},{"vendor":"juniper networks","product":"junos space"}],"references":[{"url":"https://kb.juniper.net/JSA10917","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-0017"},{"url":"https://github.com/advisories/GHSA-v5hc-28pc-qw2m"}],"sources":{"cve":[{"id":"CVE-2019-0017","title":"Junos Space: Unrestricted file upload vulnerability","description":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.","status":"published","published":"2019-01-15T21:00:00Z","modified":"2024-09-16T23:51:28.235Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:32:24.110857Z"}],"euvd":[{"id":"EUVD-2019-0824","description":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.","status":"published","published":"2019-01-15T21:00:00Z","modified":"2024-09-16T23:51:28Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:29:04.415682Z"}],"ghsa":[{"id":"GHSA-v5hc-28pc-qw2m","title":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient...","description":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.","status":"published","published":"2022-05-13T01:31:36Z","modified":"2023-02-01T05:08:22Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:50:44.535607Z"}],"nvd":[{"id":"CVE-2019-0017","description":"The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.","status":"published","published":"2019-01-15T21:29:01.493Z","modified":"2026-06-17T02:07:31.233Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-434"],"updated_at":"2026-11-02T14:05:02.989216Z"}]}}