Gurock TestRail 5.3.0.3603

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:gurock:testrail:5.3.0.3603:*:*:*:*:*:*:*

part: a version: 5.3.0.3603 update: *

VendorGurock (eac9a395-ff13-53a2-9440-6b0670f5a0a6)
ProductTestrail (9e7f6475-7e93-511f-a493-7ab22e272897)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37788 vulnerable 2026-06-08 05:32:54.762130 Details available
A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted HTTP packets with malicious iFrame data. A successful exploit could allow the attacker to perform a clickjacking attack where the user is tricked into clicking a malicious link.
Published: 2021-08-09T12:32:07.000Z
Updated: 2024-08-04T01:30:09.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7535 vulnerable 2026-06-08 05:14:14.507504 Details available
index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology.
Published: 2019-02-07T15:00:00.000Z
Updated: 2024-08-04T20:54:27.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.