Security Advisory

CVE-2022-31058

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-06-29 17:55:24

Last updated 2025-04-23 18:05:22

Assigner GitHub_M

State PUBLISHED

Description

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.95 Tuleap does not sanitize properly user inputs when constructing the SQL query to retrieve data for the tracker reports. An attacker with the capability to create a new tracker can execute arbitrary SQL queries. Users are advised to upgrade. There is no known workaround for this issue.

← Browse all CVEs View on cve.org ↗