Enalean

7 results · Clear filters · Feed

• High 7.6
  CVE-2024-30246

  Tuleap deleting or moving an artifact can delete values from unrelated artifacts

  Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not poss…

  Enalean tuleap
  Mar 29, 2024
• High 7.2
  CVE-2022-31058

  SQL injection via the field name of a tracker in Tuleap

  Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.95 Tuleap does not sanitize properly user inputs when constructing the SQL query to retrieve data for the tracker reports. An a…

  Enalean tuleap
  Jun 29, 2022
• High 8.8
  CVE-2021-43806

  SQL injection in Tuleap

  Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositorie…

  Enalean tuleap
  Dec 15, 2021
• High 8.8
  CVE-2021-41154

  SQL injection in the "SVN core" commits browser

  Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" repository could execute arbitrary SQL queries. The following versions contain the fix: Tu…

  Enalean tuleap
  Oct 18, 2021
• High 8.8
  CVE-2021-41155

  SQL injection in CVS revisions browser

  Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not sanitize properly user inputs when constructing the SQL query to browse and search revisions in the CVS repositories. T…

  Enalean tuleap
  Oct 18, 2021
• High 8.8
  CVE-2021-41148

  The update of the CI job targeted by a widget is vulnerable to blind SQL injections

  Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prior to version 11.16.99.173 of Community Edition and versions 11.16-6 and 11.15-8 of Enterprise Edition, an attacker with the ability to add …

  Enalean tuleap
  Oct 15, 2021
• High 7.2
  CVE-2021-41147

  SQL injection in the planning edition panel

  Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prior to version 11.16.99.173 of Community Edition and versions 11.16-6 and 11.15-8 of Enterprise Edition, an attacker with admin rights in one…

  Enalean tuleap
  Oct 15, 2021