CVE-2018-1999032: Agiletestware Pangolin Connector For Testrail

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

A data modification vulnerability exists in Jenkins Agiletestware Pangolin Connector for TestRail Plugin 2.1 and earlier in GlobalConfig.java that allows attackers with Overall/Read permission to override this plugin's configuration by sending crafted HTTP requests to an unprotected endpoint.

Affected products

• Agiletestware Pangolin Connector For Testrail: up to and including 2.1

Published 2018-08-01. Last modified 2026-06-17.