SpirityCVE

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Testlink	Testlink

No data.

References

No reference.

History

Thu, 22 Jan 2026 23:00:00 +0000

Type	Values Removed	Values Added
Description	TestLink versions 1.16 through 1.19 contain an unauthenticated file download vulnerability in the attachmentdownload.php endpoint. Attackers can download arbitrary files by iterating file IDs through the 'id' parameter with 'skipCheck=1' to bypass access controls.	This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate.
Title	TestLink 1.19 - Arbitrary File Download (Unauthenticated)
Weaknesses	CWE-639
References	https://testlink.org/ https://web.archive.org/web/20211208031345/https://nch.ninja/blog/unauthorized-file-download-attached-files-testlink-116-119/ https://www.exploit-db.com/exploits/50578
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 16 Jan 2026 14:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Testlink Testlink testlink
Vendors & Products		Testlink Testlink testlink

Thu, 15 Jan 2026 17:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 15 Jan 2026 16:00:00 +0000

Type	Values Removed	Values Added
Description		TestLink versions 1.16 through 1.19 contain an unauthenticated file download vulnerability in the attachmentdownload.php endpoint. Attackers can download arbitrary files by iterating file IDs through the 'id' parameter with 'skipCheck=1' to bypass access controls.
Title		TestLink 1.19 - Arbitrary File Download (Unauthenticated)
Weaknesses		CWE-639
References		https://testlink.org/ https://web.archive.org/web/20211208031345/https://nch.ninja/blog/unauthorized-file-download-attached-files-testlink-116-119/ https://www.exploit-db.com/exploits/50578
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}`

MITRE

Status: REJECTED

Assigner: VulnCheck

Published: 2026-01-15T15:52:06.479Z

Updated: 2026-01-22T20:42:51.435Z

Reserved: 2026-01-14T14:39:44.734Z

Link: CVE-2021-47760

Vulnrichment

Updated:

NVD

Status : Rejected

Published: 2026-01-15T16:16:06.993

Modified: 2026-01-22T21:15:48.850

Link: CVE-2021-47760

Redhat

No data.

Metrics