Vulnerabilities > CVE-2022-31058 - Unspecified vulnerability in Enalean Tuleap

047910
CVSS 7.2 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
enalean
NVD
Published: 2022-06-29
Updated: 2024-11-21

Summary

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.95 Tuleap does not sanitize properly user inputs when constructing the SQL query to retrieve data for the tracker reports. An attacker with the capability to create a new tracker can execute arbitrary SQL queries. Users are advised to upgrade. There is no known workaround for this issue.

Vulnerable Configurations

Part Description Count
Application
Enalean
7

References