A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HEnalean Tuleap
APPEnalean< 9.18
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References
Related vulnerabilities
CVE-2018-17298CRITICAL9.8ten sam produkt
An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user c...
CVE-2024-30246HIGH7.6ten sam produkt
Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious u...
CVE-2022-31058HIGH7.2ten sam produkt
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In vers...
CVE-2021-43806HIGH8.8ten sam produkt
Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In ...
CVE-2021-41154HIGH8.8ten sam produkt
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affe...