TestLink 1.9.20
Approved changes feed: RSS · Atom
cpe:2.3:a:testlink:testlink:1.9.20:*:*:*:*:*:*:*part: a version: 1.9.20 update: *
| Vendor | Testlink (e1e4ecfe-500f-521a-9b9e-29729a0a0624) |
|---|---|
| Product | Testlink (58cfed31-416d-592b-a325-1e98439fdc90) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/testlinkopensourcetrms/testlink-code |
purl2cpe | 2026-06-01 10:18:09.457888 |
pkg:sourceforge/testlink |
purl2cpe | 2026-06-01 10:18:09.457889 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-46097 |
vulnerable | 2026-06-08 06:48:09.946381 |
Details available
TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges.
Published: 2024-09-27T00:00:00.000Z
Updated: 2024-09-27T19:42:29.536Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35196 |
vulnerable | 2026-06-08 05:46:04.256619 |
Details available
TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.
Published: 2022-09-20T15:52:42.000Z
Updated: 2025-05-29T13:37:48.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35195 |
vulnerable | 2026-06-08 05:46:04.256095 |
Details available
TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php
Published: 2022-09-16T15:36:53.000Z
Updated: 2024-08-03T09:29:17.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35194 |
vulnerable | 2026-06-08 05:46:04.255678 |
Details available
TestLink v1.9.20 was discovered to contain a stored cross-site scripting (XSS) vulnerability via /lib/inventory/inventoryView.php.
Published: 2022-09-16T20:30:27.000Z
Updated: 2024-08-03T09:29:17.427Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35193 |
vulnerable | 2026-06-08 05:46:04.255190 |
Details available
TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php.
Published: 2022-09-16T15:59:19.000Z
Updated: 2024-08-03T09:29:17.453Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8639 |
vulnerable | 2026-06-08 05:27:17.110383 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8638 |
vulnerable | 2026-06-08 05:27:17.109923 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8637 |
vulnerable | 2026-06-08 05:27:17.109385 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12274 |
vulnerable | 2026-06-08 05:17:56.808666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12273 |
vulnerable | 2026-06-08 05:17:56.808135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.