CVE-2019-7535

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology.

Score

CVSS 3.0 5.3 Medium

Status

Modified - cve@mitre.org

Published

2019-02-07

Last modified

2024-08-04

Weaknesses

CWE-200

Affected products

• Testrail (Gurock)

References

• https://gist.github.com/nenf/2f16cd547c2afe166d1cb3f88f18bf81