376 matches found
TestLink 安全漏洞
TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink version 1.9.20 that stems from the application not checking user permissions, resulting in an access control...
CVE-2024-46097
TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...
CVE-2024-46097
TestLink version 1.9.20 is vulnerable to Incorrect Access Control within the TestPlan editing section . The application automatically generates IDs with incremental values for new TestPlans. By using the edit function, an attacker can modify the tplan_id parameter to target other IDs. Because the...
PT-2024-31908 · Testlink · Testlink
Name of the Vulnerable Software and Affected Versions: TestLink version 1.9.20 Description: The issue is related to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function, it is...
CVE-2024-46097: Improper Access Control
TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...
CVE-2024-42906
TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...
CVE-2024-42906
TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...
CVE-2024-42906: Improper Neutralization of Input During Web Page Generation
TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...
CVE-2024-42906
TestLink before v1.9.20 is vulnerable to Cross-Site Scripting (XSS) via the upload-file pop-up; an attacker can inject the payload in the file name during upload. Affected product: TestLink prior to 1.9.20. Remediation stated in PT security notes: upgrade to 1.9.20 Raijin (or apply equivalent fix...
PT-2024-30200 · Testlink · Testlink
Name of the Vulnerable Software and Affected Versions: TestLink versions prior to 1.9.20 Description: The issue allows for Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name. Recommendations: For versions prior to 1.9.2...
CVE-2024-42906
TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...
TestLink 安全漏洞
TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink versions prior to v.1.9.20 that stems from the presence of cross-site scripting XSS...
CVE-2024-42906
TestLink before v.1.9.20 is vulnerable to Cross Site Scripting XSS via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name...
CVE-2023-50110
TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...
CVE-2023-50110
TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...
Authentication flaw
TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...
TestLink Security Breach
TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink versions 1.9.20 and earlier, which stems from a vulnerability that allows authentication to be bypassed via...
PT-2023-31477 · Testlink · Testlink
Name of the Vulnerable Software and Affected Versions: TestLink versions 1.9.20 and earlier Description: The issue allows type juggling for authentication bypass because the === operator is not used. This can lead to unauthorized access. Recommendations: For versions 1.9.20 and earlier, consider...