CVE-2023-50110

TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used...

CVE-2023-50110

CVE-2023-50110 affects TestLink up to version 1.9.20. The root cause is type juggling in authentication due to not using strict equality (===), enabling authentication bypass. Impact is high (I: High) with no confidentiality/availability impacts, per sources. Exploitation details are not provided...

CVE-2022-35196

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

CVE-2022-35196

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

Cross site request forgery (csrf)

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

CVE-2022-35196

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

CVE-2022-35196

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

CVE-2022-35196

CVE-2022-35196 affects TestLink v1.9.20 and is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via the /lib/plan/planView.php endpoint. The incident has a high impact (C/H/I/A) per CVSS 3.1 (8.8) with network attack vector, no privileges required, user interaction required. The conn...

PT-2022-22627 · Testlink · Testlink

Name of the Vulnerable Software and Affected Versions: TestLink version 1.9.20 Description: A Cross-Site Request Forgery CSRF issue was found via the "/lib/plan/planView.php" API endpoint. Recommendations: For version 1.9.20, update to a newer version that contains a fix for this issue...

TestLink 跨站请求伪造漏洞

TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink v1.9.20, which was discovered via /lib/plan/planView.php to contain a cross-site request forgery vulnerabili...

CVE-2022-35196: Cross-Site Request Forgery (CSRF)

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

CVE-2022-35194

TestLink v1.9.20 was discovered to contain a stored cross-site scripting XSS vulnerability via /lib/inventory/inventoryView.php...

CVE-2022-35194

TestLink v1.9.20 was discovered to contain a stored cross-site scripting XSS vulnerability via /lib/inventory/inventoryView.php...

CVE-2022-35194

TestLink v1.9.20 was discovered to contain a stored cross-site scripting XSS vulnerability via /lib/inventory/inventoryView.php...

Cross site scripting

TestLink v1.9.20 was discovered to contain a stored cross-site scripting XSS vulnerability via /lib/inventory/inventoryView.php...

CVE-2022-35194

TestLink v1.9.20 was discovered to contain a stored cross-site scripting XSS vulnerability via /lib/inventory/inventoryView.php...

CVE-2022-35194

CVE-2022-35194 affects TestLink v1.9.20, where a stored cross-site scripting (XSS) vulnerability exists in the API endpoint /lib/inventory/inventoryView.php . The Red Hat and PT Security entries corroborate the vulnerability and indicate an update to a newer TestLink version containing a fix as t...

CVE-2022-35193

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php...

CVE-2022-35195

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php...

CVE-2022-35193

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php...