CVE-2020-12274

In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...

CVE-2020-12274

CVE-2020-12274 affects TestLink 1.9.20. The vulnerability is in lib/cfields/cfieldsExport.php where the goback_url parameter uses client input without proper constraining to lib/cfields/cfieldsView.php for the session site. This describes a security risk but the connected Red Hat/CVE sources do n...