Skip to contentEnalean Tuleap vulnerabilities
- enalean tuleapSQL injection via the field name of a tracker in TuleapCVE-2022-310587.2 High
- enalean tuleapCross site scripting via the title of a document in TuleapCVE-2022-310636.5 Medium
- enalean tuleapResources of private projects can be exposed in TuleapCVE-2022-310324.3 Medium
- enalean tuleapTracker report renderer and chart widgets leak information in TuleapCVE-2022-248964.3 Medium
- enalean tuleapSQL injection in TuleapCVE-2021-438068.8 High
- enalean tuleapIndirect LDAP injection in TuleapCVE-2021-412766.7 Medium
- enalean tuleapIndirect LDAP injection in TuleapCVE-2021-437826.7 Medium
- enalean tuleapSQL injection in the "SVN core" commits browserCVE-2021-411548.8 High
- enalean tuleapSQL injection in CVS revisions browserCVE-2021-411558.8 High
- enalean tuleapThe update of the CI job targeted by a widget is vulnerable to blind SQL injectionsCVE-2021-411488.8 High
- enalean tuleapSQL injection in the planning edition panelCVE-2021-411477.2 High
- enalean tuleapXSS via the name of a deleted attachmentCVE-2021-411425.4 Medium
- enalean tuleapAn issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated...CVE-2018-172989.8 Critical
- enalean tuleapA SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering...CVE-2018-7538Public exploit9.8 Critical
- enalean tuleapAn issue was discovered in Enalean Tuleap 9.17. Lack of CSRF attack mitigation while changing an...CVE-2018-76348.8 High
- enalean tuleapAn issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists...CVE-2017-7411Public exploitEPSS 66.5%8.8 High
- enalean tuleap, phpwiki project phpwiki +1 moreTuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This...CVE-2017-7981Public exploitEPSS 15.3%8.8 High
- enalean tuleapproject/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled,...CVE-2014-8791Public exploitEPSS 14.8%6.0 Medium
- enalean tuleapEnalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User...CVE-2014-7178Public exploit9.3 High
- enalean tuleapSQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users...CVE-2014-7176Public exploit6.5 Medium
- enalean tuleapXML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated...CVE-2014-7177Public exploit4.0 Medium