PT-2021-23134
CVE-2021-41154
·
تاريخ النشر
2021-10-18
·
تاريخ التحديث
2021-10-22
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Tuleap Community Edition versions prior to 11.17.99.144
Tuleap Enterprise Edition versions prior to 11.17-5
Tuleap Enterprise Edition versions prior to 11.16-7
Description
The issue allows an attacker with read access to a "SVN core" repository to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.
Recommendations
For Tuleap Community Edition versions prior to 11.17.99.144, update to version 11.17.99.144 or later.
For Tuleap Enterprise Edition versions prior to 11.17-5, update to version 11.17-5 or later.
For Tuleap Enterprise Edition versions prior to 11.16-7, update to version 11.16-7 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾