CVE-2021-41154 — SQL injection in the "SVN core" commits browser
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" reposito…
Published: 2021-10-18 · CVSS: 8.8 · CVSS 3.1
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" repository could execute arbitrary SQL queries. The following versions contain the fix: Tuleap Community Edition 11.17.99.144, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7