CVE-2022-35196 - TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php

HIGH

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php

Published Sep 20, 2022

8.8

HIGH

CVSS 3.1

EPSS 0.50%

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery (CSRF) via /lib/plan/planView.php.

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38089		Advisory
https://github.com/HuangYuHsiangPhone/CVEs/		x_refsource_MISCThird Party Advisory
https://github.com/HuangYuHsiangPhone/CVEs/tree/main/TestLink/CVE-2022-35196		x_refsource_MISCExploitThird Party Advisory