Description
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
Unscored
CVE-2018-7668
EUVD-2018-19384GHSA-g359-2hjj-8pjg
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownloa…
Published Mar 5, 2018 · Updated Aug 5, 2024 · Assigned by mitre