Unrated severityNVD Advisory· Published Oct 18, 2021· Updated Aug 4, 2024

SQL injection in the "SVN core" commits browser

CVE-2021-41154

Description

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" repository could execute arbitrary SQL queries. The following versions contain the fix: Tuleap Community Edition 11.17.99.144, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enalean/Tuleapllm-fuzzy2 versions
< 11.17.99.144 (Community) / < 11.17-5 (Enterprise) / < 11.16-7 (Enterprise)+ 1 more
- (no CPE)range: < 11.17.99.144 (Community) / < 11.17-5 (Enterprise) / < 11.16-7 (Enterprise)
- (no CPE)range: < 11.17.99.144

Patches

Vulnerability mechanics

References

github.com/Enalean/tuleap/commit/ab12b686ced4cf233d3b15b08da008e0553eb6a6mitrex_refsource_MISC
github.com/Enalean/tuleap/security/advisories/GHSA-6462-gfv9-jf83mitrex_refsource_CONFIRM
tuleap.net/plugins/git/tuleap/tuleap/stablemitrex_refsource_MISC
tuleap.net/plugins/tracker/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000