PatchTheCVEtestlink vulnerabilities
Recent CVEs affecting testlink products. 3 tracked.
testlink has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-09-27. Highest priority: CVE-2023-50110 (score 49/100).
- CVE-2024-46097 HIGH 8.1 DOWNGRADE TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section
- CVE-2024-42906 MEDIUM 6.1 UPGRADE TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file
- CVE-2023-50110 HIGH 7.5 UPGRADE TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.
FAQ
How do I fix testlink vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is testlink being exploited right now?
None of the tracked testlink CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which testlink CVE should I patch first?
CVE-2023-50110 currently ranks highest (49/100): TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used..