Gurock Testrail
7 CVEs affecting Gurock Testrail. Latest disclosed: 2023-02-03. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-20063 | High | 8.8 | 2019-02-25 | An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (available in the descrip… |
CVE-2021-40875 | High | 7.5 | 2021-09-22 | Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on t… |
CVE-2021-36538 | Medium | 5.4 | 2023-02-03 | Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the reference field in… |
CVE-2021-44263 | Medium | 5.4 | 2021-12-20 | Gurock TestRail before 7.2.4 mishandles HTML escaping. |
CVE-2021-37788 | Medium | 5.4 | 2021-08-09 | A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjac… |
CVE-2019-7535 | Medium | 5.3 | 2019-02-07 | index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the ident… |
CVE-2014-4857 | | 2014-07-26 | Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By fiel… |