CVE-2020-12273: Testlink

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.

Affected products

• Testlink Testlink: version 1.9.20 only

Published 2020-04-27. Last modified 2026-06-17.