In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.

Published Apr 27, 2020 · Updated Aug 4, 2024 · Assigned by mitre