Security Advisory

CVE-2014-8791

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-12-02 01:00:00

Last updated 2024-08-06 13:26:02

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter.

← Browse all CVEs View on cve.org ↗