CVE-2021-44263

Description

References

• discuss.gurock.com/t/testrail-7-2-4-released-to-cloud/20248 · Release Notes
• gist.github.com/miglen/b09498b4b9fe1be58973bd474af125ab · Exploit

Autres vulnérabilités de testrail

• CVE-2021-36538MOYENNE 5.4Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the…
• CVE-2021-40875ÉLEVÉE 7.5Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /…
• CVE-2021-37788MOYENNE 5.4A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a de…
• CVE-2018-20063ÉLEVÉE 8.8An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (avail…
• CVE-2019-7535MOYENNE 5.3index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path discl…