TestLink vulnerabilities

CVEs whose affected-version data names the TestLink package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-70561Medium· 6.5PoC

1mo ago

TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php

TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-privilege guest accounts, to read arbitrary attachments by supplying an integer attachment ID to the a…

▾ TwilightTestLinkOpenSourceTRMS · TestLinkEPSS 0.29%via CVEORG