Testlink (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 41 known versions, newest CVE from 2024-08-26. Vendor: Jenkins.

CVEs of Testlink

• CVE-2024-42906 - CVSS 6.1 (medium), 2024-08-26: TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload can be entered into…
• CVE-2019-10378 - CVSS 5.3 (medium), 2019-08-07: Jenkins TestLink Plugin 3.16 and earlier stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by…
• CVE-2018-1000113 - CVSS 5.4 (medium), 2018-03-13: A cross-site scripting vulnerability exists in Jenkins TestLink Plugin 2.12 and earlier in TestLinkBuildAction/summary.jelly and others that allow an attacker…