Authentication flaw

2023-12-3017:15:00

PRIOn knowledge base

www.prio-n.com

testlink 1.9.20

authentication

type juggling

bypass

nvd

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

18.0%

TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.

CPENameOperatorVersion
testlinkle1.9.20

CPE	Name	Operator	Version
	testlink	le	1.9.20

References

github.com/TestLinkOpenSourceTRMS/testlink-code/pull/357