The vulnerability of the Kiwi TCMS testing system lies in the lack of measures to protect the website structure. This allows attackers to upload arbitrary attachments to testing plans and test scenarios.

The vulnerability of the Kiwi TCMS testing system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to upload arbitrary attachments to testing plans and test scenarios...