CVE-2021-40875

HIGHNuclei

gurock testrail Direct Request ('Forced Browsing')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-40875 has a selected CVSS score of 7.5 (high); EIP currently links 1 catalogued exploit, 2 repository PoCs, and 1 Nuclei template.

Description

Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on the client side of a Gurock TestRail application, disclosing a full list of application files and the corresponding file paths. The corresponding file paths can be tested, and in some cases, result in the disclosure of hardcoded credentials, API keys, or other sensitive data.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 18, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Repository PoCs
2
Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

testrail

Browse gurock / testrail
VulnCheckVersion data not supplied

Proofs of concept

3

Catalogued exploits

ExploitDBGurock Testrail 7.2.0.3014 - 'files.md5' Improper Access ControlExploitDB exploitby Sick CodesNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubSakuraSamuraii/derailedRepository PoCby SakuraSamuraii8Not analyzed4 files

410.2 KiB

GitHub
PoC details
GitHubLul/TestRail-files.md5-IAC-scannerRepository PoCby Lul2Not analyzed3 files

Python · 36.4 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHGurock TestRail Application files.md5 ExposureCVSS 7.5

Improper access control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on the client side of a Gurock TestRail application, disclosing a full list of application files and the corresponding file paths which can then be tested, and in some cases result in the disclosure of hardcoded credentials, API keys, or other sensitive data.

Impact

An attacker could use the exposed files.md5 to gain insight into the application's file structure and potentially identify vulnerabilities or sensitive information.

Remediation

Securely restrict access to the files.md5 file and ensure that it is not accessible to unauthorized users.

WeaknessesCWE-425
Authorsoscarintherocks
Template tagscve2021cveexposuregurocktestrailvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:gurock:testrail:*:*:*:*:*:*:*:*
Shodan: http.html:"TestRail"
Shodan: http.html:"testrail"
FOFA: body="testrail"
https://johnjhacking.com/blog/cve-2021-40875/ https://www.gurock.com/testrail/tour/enterprise-edition https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40875 https://github.com/SakuraSamuraii/derailed

Source: ProjectDiscovery

References

5