[CVE-2026-84285] An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 cou…

Descripción técnica

An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 could allow an attacker to execute arbitrary commands on the server.

Puntuación CVSS

Score: 8.8/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Debilidades (CWE)

CWE-78

Fuente oficial

Publicado en NIST NVD.