CVE-2020-12274

In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...

CVE-2020-12274: Undefined Security Weakness

In TestLink 1.9.20, the lib/cfields/cfieldsExport.php gobackurl parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web site associated with the session...

PT-2020-13087

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description The issue arises from the goback url parameter in the lib/cfields/cfieldsExport.php file, which relies on client input and lacks proper constraints to lib/cfields/cfieldsView.php within the session's...