CVE-2020-8841: Testlink

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection.

Affected products

• Testlink Testlink: version 1.9.19 only

Published 2020-02-10. Last modified 2026-06-17.