4 matches found
CVE-2023-50110
TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...
7.5CVSS7.3AI score0.00651EPSS
SaveExploits1References1
CVE-2023-50110
TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...
7.5CVSS0.00651EPSS
SaveExploits1References1
CVE-2023-50110
TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...
8AI score0.00651EPSS
SaveExploits1References1
CVE-2023-50110
CVE-2023-50110 affects TestLink up to version 1.9.20. The root cause is type juggling in authentication due to not using strict equality (===), enabling authentication bypass. Impact is high (I: High) with no confidentiality/availability impacts, per sources. Exploitation details are not provided...
7.5CVSS7.8AI score0.00651EPSS
SaveExploits1References1Affected Software1
20