CVE-2021-41155

Source
https://cve.org/CVERecord?id=CVE-2021-41155
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41155.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-41155
Related
  • GHSA-f8jp-hx4q-wxvr
Published
2021-10-18T22:15:07.680Z
Modified
2026-04-10T04:38:35.301011Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not sanitize properly user inputs when constructing the SQL query to browse and search revisions in the CVS repositories. The following versions contain the fix: Tuleap Community Edition 11.17.99.146, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.

References

Affected packages

Git / github.com/enalean/tuleap

Affected ranges

Type
GIT
Repo
https://github.com/enalean/tuleap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/enalean/tuleap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41155.json"
unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "11.17.99.146"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.16-1"
            },
            {
                "fixed": "11.16-7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "11.17-1"
            },
            {
                "fixed": "11.17-5"
            }
        ]
    }
]