PT-2021-23947 · Unknown+2 · Tuleap Community Edition+3

Tgerbet + 1 · Published 2021-12-15 · Updated 2021-12-21 · CVE-2021-43806

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 13.2.99.155 Tuleap Enterprise Edition versions prior to 13.1-7 Tuleap Enterprise Edition versions prior to 13.2-6

Description: The issue arises from improper sanitization of user settings when constructing SQL queries to browse and search commits in CVS repositories. This allows an authenticated malicious user with read access to a CVS repository to execute arbitrary SQL queries. Tuleap instances without an active CVS repository are not affected.

Recommendations: For Tuleap Community Edition versions prior to 13.2.99.155, update to version 13.2.99.155 or later. For Tuleap Enterprise Edition versions prior to 13.1-7, update to version 13.1-7 or later. For Tuleap Enterprise Edition versions prior to 13.2-6, update to version 13.2-6 or later.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-43806

GHSA-X8FR-8GVW-CC4V

Affected Products

Cvs

Tuleap

Tuleap Community Edition

Tuleap Enterprise Edition

References · 6

• https://github.com/Enalean/tuleap/security/advisories/GHSA-x8fr-8gvw-cc4v · Patch
• https://github.com/Enalean/tuleap/commit/b82be896b00a787ed46a77bd4700e8fccfe2e5ba · Patch
• https://osv.dev/vulnerability/CVE-2021-43806 · Vendor Advisory
• https://tuleap.net/plugins/tracker/?aid=24202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43806 · Security Note
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=b82be896b00a787ed46a77bd4700e8fccfe2e5ba · Vendor Advisory