CVE-2021-41154: Enalean Tuleap

High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" repository could execute arbitrary SQL queries. The following versions contain the fix: Tuleap Community Edition 11.17.99.144, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.

Affected products

• Enalean Tuleap: before 11.17.99.144 (fixed in 11.17.99.144); from 11.16-1, before 11.16-7 (fixed in 11.16-7); from 11.17-1, before 11.17-5 (fixed in 11.17-5)

Published 2021-10-18. Last modified 2026-06-17.