Unrated
In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.
CVE-2020-12273
First seen on SecPulse
References
- patch github.com
- report mantis.testlink.org