CVE-2019-7535: Gurock Testrail

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology.

Affected products

• Gurock Testrail: version 5.3.0.3603 only

Published 2019-02-07. Last modified 2026-06-17.