CVE-2014-7177: Undefined Security Weakness

XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/...

PT-2014-7816

Name of the Vulnerable Software and Affected Versions Enalean Tuleap versions 7.2 and earlier Description The issue allows remote authenticated users to read arbitrary files by submitting a crafted XML document in a create action to the "plugins/tracker/" endpoint. Recommendations For Enalean...