CVE-2021-43806

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated malicious user with...

CVE-2021-43806

CVE-2021-43806 affects Tuleap, a Libre/Open Source ALM platform. The vulnerability arises from improper sanitization when constructing SQL queries to browse/search commits in CVS repositories, allowing an authenticated user with read access to execute arbitrary SQL queries. Tuleap instances witho...

CVE-2021-43806 SQL injection in Tuleap

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated malicious user with...