CVE-2022-35195

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php...

CVE-2022-35195: Undefined Security Weakness

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php...

PT-2022-22626

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Raijin Description A broken access control issue was found in TestLink at the "/lib/attachments/attachmentdownload.php" API endpoint. Recommendations For TestLink version 1.9.20 Raijin, consider restricting access to th...

PT-2018-18197

Name of the Vulnerable Software and Affected Versions TestLink versions prior to 1.9.17 Description The issue allows remote attackers to read arbitrary attachments by modifying the ID field in the /lib/attachments/attachmentdownload.php endpoint. Recommendations For versions prior to 1.9.17, upda...