CVE-2014-4857

概要

参考情報

• forum.gurock.com/topic/1652/testrail-313-released · Vendor Advisory
• kb.cert.org/vuls/id/669804 · Third Party Advisory

testrail のその他の脆弱性

• CVE-2021-36538中 5.4Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the…
• CVE-2021-44263中 5.4Gurock TestRail before 7.2.4 mishandles HTML escaping.
• CVE-2021-40875高 7.5Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /…
• CVE-2021-37788中 5.4A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a de…
• CVE-2018-20063高 8.8An issue was discovered in Gurock TestRail 5.6.0.3853. An "Unrestricted Upload of File" vulnerability exists in the image-upload form (avail…