CVE-2019-10378

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10378

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Design/Logic Flaw

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10378

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10378

CVE-2019-10378 affects the Jenkins TestLink Plugin (versions ≤ 3.16). The vulnerability arises from credentials being stored unencrypted in the plugin’s global configuration file on the Jenkins master filesystem, enabling anyone with master FS access to view them. The CVSS v3.1 score is 5.3 ( MED...

CVE-2019-10378

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

PT-2019-11774 · Jenkins · Jenkins Testlink Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins TestLink Plugin versions 3.16 and earlier Description: The issue concerns the storage of credentials in an unencrypted manner within the global configuration file on the Jenkins master or controller. Specifically, the credentials are...

CVE-2019-10378: Insufficiently Protected Credentials

Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

testlink stores credentials in plain text

testlink stores credentials unencrypted in its global configuration file hudson.plugins.testlink.TestLinkBuilder.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system. As of publication of this advisory, there is no fix...

CVE-2019-14471

TestLink 1.9.19 has XSS via the error.php message parameter...

CVE-2019-14471

TestLink 1.9.19 has XSS via the error.php message parameter...

Code injection

TestLink 1.9.19 has XSS via the error.php message parameter...

CVE-2019-14471

CVE-2019-14471 affects TestLink 1.9.19 and is a cross-site scripting (XSS) vulnerability via the error.php message parameter. Public data in the connected documents confirms the affected software/version and the root cause as improper handling of the error message leading to script injection. CVS...

CVE-2019-14471

TestLink 1.9.19 has XSS via the error.php message parameter...

CVE-2019-14471: Improper Neutralization of Input During Web Page Generation

TestLink 1.9.19 has XSS via the error.php message parameter...

TestLink 1.9.19 Server-Side Request Forgery

Exploit Title : TestLink version = 1.9.19 Server Side Request Forgery Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://testlink.org Love to : zero cool,Team indishell,Mannu,Viki,Hardeep Singh,Incredible,Kishan Singh and ritu rathi Discovered At : Indishell Lab...

TestLink Open Source Test Management Code Execution

Title: TestLink Open Source Test Management comment out skip-networking as well as bind-address if any present in my.cnf i.e chang...

TestLink Open Source Test Management < 1.9.16 - Remote Code Execution Exploit

Exploit for linux platform in category remote exploits Title: TestLink Open Source Test Management comment out skip-networking as well as bind-add...

TestLink Open Source Test Management 1.9.16 - Remote Code Execution (PoC)

TestLink Open Source Test Management 1.9.16 - Remote Code Execution PoC Title: TestLink Open Source Test Management comment out skip-networking as well as bind-address if any presen...

Jenkins TestLink Plugin Cross-Site Scripting Vulnerability

Jenkins is an open source software project , is based on Java development of a continuous integration tool . A cross-site scripting vulnerability exists in TestLinkBuildAction/summary.jelly and other scripts in Jenkins TestLink Plugin 2.12 and earlier versions, which stems from a program that mak...