CVE-2018-7668 TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| testlink | <= 1.9.16 | No fix listed |
References
- lists.openwall.net exploit patch third-party-advisory