Gurock

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Gurock records in CISA KEV

No Gurock vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Testrail 7 records MEDIUM

Records

7 records in Testrail · all components

TI-2021-17796 CVE-2021-40875 · GHSA-fmj6-gcwc-6452

Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive…

MEDIUM 63

Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.47486 Published 2021-09-22 No fix listed CWE-425

TI-2021-14789 CVE-2021-36538 · GHSA-72hh-mph6-r9jw

Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote…

MEDIUM 58

Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the reference field in milestones or description fields in reports.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00551 Published 2023-02-03 No fix listed CWE-79

TI-2018-14224 CVE-2018-20063 · GHSA-m85g-68xc-c3cc

An issue was discovered in Gurock TestRail 5.6.0.3853.

MEDIUM 43

An issue was discovered in Gurock TestRail 5.6.0.3853.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02717 Published 2019-02-25 No fix listed CWE-434

TI-2021-15636 CVE-2021-37788 · GHSA-f959-ggj2-2q4j

A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an…

LOW 28

A vulnerability in the web UI of Gurock TestRail v5.3.0.3603 could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01525 Published 2021-08-09 No fix listed CWE-1021

TI-2019-05320 CVE-2019-7535 · GHSA-rxg5-5wmp-79m2

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an…

LOW 26

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01103 Published 2019-02-07 No fix listed CWE-200

TI-2021-19937 CVE-2021-44263 · GHSA-6vwx-5hx5-h5v2

Gurock TestRail before 7.2.4 mishandles HTML escaping.

LOW 25

Gurock TestRail before 7.2.4 mishandles HTML escaping.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00609 Published 2021-12-20 No fix listed CWE-79

TI-2014-03995 CVE-2014-4857 · GHSA-5cw3-xmmf-w5x9

Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01673 Published 2014-07-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	5
Low	0
No CVSS	0