PT-2023-8827

Name of the Vulnerable Software and Affected Versions Kiwi TCMS versions prior to 12.4 Description The issue is related to the lack of protection of the web page structure in Kiwi TCMS, allowing a remote attacker to upload arbitrary attachments to test plans and test cases. Earlier versions of Ki...