CVE-2018-7538 in Tuleap Software Engineering Platform

Summary

A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 02/27/2018
• Disclosure: 03/12/2018
• Moderation: VulDB entry created
• Entries: 1: VDB-114408
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 8.5
• EPSS: 0.11993
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-7538
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-7538
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-7538/