high7.5
CVE-2018-7668
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
Impact
TestLink through 1.9.16 allows remote attackers to read arbitrary attachments via a modified ID field to /lib/attachments/attachmentdownload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Testlink | Testlink | through 1.9.16 |