CVE-2019-7535 index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technolog...
MediumCVSS 5.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gurock testrail | = 5.3.0.3603 | No fix listed |
References
- gist.github.com third-party-advisory