PT-2020-20249 · Testlink · Testlink

Fmancardi · Published 2020-04-03 · Updated 2021-02-22 · CVE-2020-8639

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20

Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a publicly accessible directory of the application. This is made possible by an unrestricted file upload vulnerability in the keywordsImport.php file. An authenticated attacker can upload a malicious file containing PHP code to execute operating system commands.

Recommendations For TestLink version 1.9.20, consider restricting access to the keywordsImport.php file to prevent malicious file uploads until a patch is available. As a temporary workaround, restrict the types of files that can be uploaded to prevent executable files from being uploaded.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-8639

Affected Products

Testlink

References · 7

• 🔥 https://exploit-db.com/exploits/49561 · Exploit
• 🔥 http://packetstormsecurity.com/files/161401/TestLink-1.9.20-Shell-Upload.html · Exploit
• 🔥 https://ackcent.com/blog/testlink-1.9.20-unrestricted-file-upload-and-sql-injection · Exploit
• https://github.com/TestLinkOpenSourceTRMS/testlink-code/commit/57d81ae350d569c5c95087997fe051c49e14516d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-8639 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8639 · Vendor Advisory
• https://t.me/cvenotify/2414 · Telegram Post