CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40875

Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on the client side of a Gurock TestRail application, disclosing a full list of application files and the corresponding file paths. The corresponding file paths can be tested, and in some cases, result in the disclosure of hardcoded credentials, API keys, or other sensitive data.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.799

EPSS Ranking 99.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-40875

Gurock » Testrail » Version: 1.0

cpe:2.3:a:gurock:testrail:1.0
Gurock » Testrail » Version: 1.0.2

cpe:2.3:a:gurock:testrail:1.0.2
Gurock » Testrail » Version: 1.0.3

cpe:2.3:a:gurock:testrail:1.0.3
Gurock » Testrail » Version: 1.0.4

cpe:2.3:a:gurock:testrail:1.0.4
Gurock » Testrail » Version: 1.1

cpe:2.3:a:gurock:testrail:1.1
Gurock » Testrail » Version: 1.2

cpe:2.3:a:gurock:testrail:1.2
Gurock » Testrail » Version: 1.3

cpe:2.3:a:gurock:testrail:1.3
Gurock » Testrail » Version: 1.3.1

cpe:2.3:a:gurock:testrail:1.3.1
Gurock » Testrail » Version: 2.0

cpe:2.3:a:gurock:testrail:2.0
Gurock » Testrail » Version: 2.0.1

cpe:2.3:a:gurock:testrail:2.0.1
Gurock » Testrail » Version: 2.1

cpe:2.3:a:gurock:testrail:2.1
Gurock » Testrail » Version: 2.1.0.352

cpe:2.3:a:gurock:testrail:2.1.0.352
Gurock » Testrail » Version: 2.2

cpe:2.3:a:gurock:testrail:2.2
Gurock » Testrail » Version: 2.3

cpe:2.3:a:gurock:testrail:2.3
Gurock » Testrail » Version: 2.3.1

cpe:2.3:a:gurock:testrail:2.3.1
Gurock » Testrail » Version: 2.3.2

cpe:2.3:a:gurock:testrail:2.3.2
Gurock » Testrail » Version: 2.4

cpe:2.3:a:gurock:testrail:2.4
Gurock » Testrail » Version: 2.4.1

cpe:2.3:a:gurock:testrail:2.4.1
Gurock » Testrail » Version: 2.5

cpe:2.3:a:gurock:testrail:2.5
Gurock » Testrail » Version: 2.5.1

cpe:2.3:a:gurock:testrail:2.5.1
Gurock » Testrail » Version: 2.6

cpe:2.3:a:gurock:testrail:2.6
Gurock » Testrail » Version: 2.7

cpe:2.3:a:gurock:testrail:2.7
Gurock » Testrail » Version: 2.7.1

cpe:2.3:a:gurock:testrail:2.7.1
Gurock » Testrail » Version: 3.0

cpe:2.3:a:gurock:testrail:3.0
Gurock » Testrail » Version: 3.0.1

cpe:2.3:a:gurock:testrail:3.0.1
Gurock » Testrail » Version: 3.0.2

cpe:2.3:a:gurock:testrail:3.0.2
Gurock » Testrail » Version: 3.0.3

cpe:2.3:a:gurock:testrail:3.0.3
Gurock » Testrail » Version: 3.0.4

cpe:2.3:a:gurock:testrail:3.0.4
Gurock » Testrail » Version: 3.1

cpe:2.3:a:gurock:testrail:3.1
Gurock » Testrail » Version: 3.1.1

cpe:2.3:a:gurock:testrail:3.1.1
Gurock » Testrail » Version: 3.1.1.3130

cpe:2.3:a:gurock:testrail:3.1.1.3130
Gurock » Testrail » Version: 3.1.2

cpe:2.3:a:gurock:testrail:3.1.2
Gurock » Testrail » Version: 3.1.3

cpe:2.3:a:gurock:testrail:3.1.3
Gurock » Testrail » Version: 4.0.1

cpe:2.3:a:gurock:testrail:4.0.1
Gurock » Testrail » Version: 4.0.2

cpe:2.3:a:gurock:testrail:4.0.2
Gurock » Testrail » Version: 4.0.3

cpe:2.3:a:gurock:testrail:4.0.3
Gurock » Testrail » Version: 4.0.4

cpe:2.3:a:gurock:testrail:4.0.4
Gurock » Testrail » Version: 4.1

cpe:2.3:a:gurock:testrail:4.1
Gurock » Testrail » Version: 4.2

cpe:2.3:a:gurock:testrail:4.2
Gurock » Testrail » Version: 4.2.1

cpe:2.3:a:gurock:testrail:4.2.1
Gurock » Testrail » Version: 5.0

cpe:2.3:a:gurock:testrail:5.0
Gurock » Testrail » Version: 5.0.1

cpe:2.3:a:gurock:testrail:5.0.1
Gurock » Testrail » Version: 5.0.2

cpe:2.3:a:gurock:testrail:5.0.2
Gurock » Testrail » Version: 5.1

cpe:2.3:a:gurock:testrail:5.1
Gurock » Testrail » Version: 5.2

cpe:2.3:a:gurock:testrail:5.2
Gurock » Testrail » Version: 5.2.1

cpe:2.3:a:gurock:testrail:5.2.1
Gurock » Testrail » Version: 5.3

cpe:2.3:a:gurock:testrail:5.3
Gurock » Testrail » Version: 5.3.0.3603

cpe:2.3:a:gurock:testrail:5.3.0.3603
Gurock » Testrail » Version: 5.4

cpe:2.3:a:gurock:testrail:5.4
Gurock » Testrail » Version: 5.4.1

cpe:2.3:a:gurock:testrail:5.4.1
Gurock » Testrail » Version: 5.5

cpe:2.3:a:gurock:testrail:5.5
Gurock » Testrail » Version: 5.5.1

cpe:2.3:a:gurock:testrail:5.5.1
Gurock » Testrail » Version: 5.6.0.3853

cpe:2.3:a:gurock:testrail:5.6.0.3853
Gurock » Testrail » Version: 5.6.0.3856

cpe:2.3:a:gurock:testrail:5.6.0.3856
Gurock » Testrail » Version: 5.6.0.3861

cpe:2.3:a:gurock:testrail:5.6.0.3861
Gurock » Testrail » Version: 6.2

cpe:2.3:a:gurock:testrail:6.2
Gurock » Testrail » Version: 6.3.1

cpe:2.3:a:gurock:testrail:6.3.1
Gurock » Testrail » Version: 6.4.0

cpe:2.3:a:gurock:testrail:6.4.0
Gurock » Testrail » Version: 6.5.3

cpe:2.3:a:gurock:testrail:6.5.3
Gurock » Testrail » Version: 6.5.4

cpe:2.3:a:gurock:testrail:6.5.4
Gurock » Testrail » Version: 6.5.5

cpe:2.3:a:gurock:testrail:6.5.5
Gurock » Testrail » Version: 6.5.6

cpe:2.3:a:gurock:testrail:6.5.6
Gurock » Testrail » Version: 6.5.7

cpe:2.3:a:gurock:testrail:6.5.7
Gurock » Testrail » Version: 6.6

cpe:2.3:a:gurock:testrail:6.6
Gurock » Testrail » Version: 6.6.1

cpe:2.3:a:gurock:testrail:6.6.1
Gurock » Testrail » Version: 6.7

cpe:2.3:a:gurock:testrail:6.7
Gurock » Testrail » Version: 6.7.1

cpe:2.3:a:gurock:testrail:6.7.1
Gurock » Testrail » Version: 6.7.1.1020

cpe:2.3:a:gurock:testrail:6.7.1.1020
Gurock » Testrail » Version: 6.7.2

cpe:2.3:a:gurock:testrail:6.7.2
Gurock » Testrail » Version: 7.0

cpe:2.3:a:gurock:testrail:7.0
Gurock » Testrail » Version: 7.0.0.1052

cpe:2.3:a:gurock:testrail:7.0.0.1052
Gurock » Testrail » Version: 7.0.1

cpe:2.3:a:gurock:testrail:7.0.1
Gurock » Testrail » Version: 7.0.1.1013

cpe:2.3:a:gurock:testrail:7.0.1.1013
Gurock » Testrail » Version: 7.0.2

cpe:2.3:a:gurock:testrail:7.0.2
Gurock » Testrail » Version: 7.0.2.1015

cpe:2.3:a:gurock:testrail:7.0.2.1015
Gurock » Testrail » Version: 7.0.2.1016

cpe:2.3:a:gurock:testrail:7.0.2.1016
Gurock » Testrail » Version: 7.1

cpe:2.3:a:gurock:testrail:7.1
Gurock » Testrail » Version: 7.1.0.1068

cpe:2.3:a:gurock:testrail:7.1.0.1068
Gurock » Testrail » Version: 7.1.0.1070

cpe:2.3:a:gurock:testrail:7.1.0.1070
Gurock » Testrail » Version: 7.1.1

cpe:2.3:a:gurock:testrail:7.1.1
Gurock » Testrail » Version: 7.1.1.1033

cpe:2.3:a:gurock:testrail:7.1.1.1033
Gurock » Testrail » Version: 7.1.2

cpe:2.3:a:gurock:testrail:7.1.2
Gurock » Testrail » Version: 7.1.2.1044

cpe:2.3:a:gurock:testrail:7.1.2.1044
Gurock » Testrail » Version: 7.1.2.1084

cpe:2.3:a:gurock:testrail:7.1.2.1084
Gurock » Testrail » Version: 7.2.0.3007

cpe:2.3:a:gurock:testrail:7.2.0.3007
Gurock » Testrail » Version: 7.2.0.3011

cpe:2.3:a:gurock:testrail:7.2.0.3011

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-40875

Products

Pricing

Contact Us