CVE-2019-7535

CVE-2019-7535 is a medium-severity information disclosure vulnerability affecting Gurock TestRail version 5.3.0.3603. It allows an unauthenticated attacker to obtain potentially sensitive information, such as full path disclosure and the identification of PHP as the backend technology, by sending an invalid request to index.php. The CVSS score is 5.3, indicating a low impact on confidentiality and no impact on integrity or availability, with a network attack vector and low attack complexity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.