CVE-2021-41154

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "SVN core" repository could execute arbitrary SQL queries. The following versions contain the fix: Tuleap Community Edition 11.17.99.144, Tuleap Enterprise Edition 11.17-5, Tuleap Enterprise Edition 11.16-7.

• CWE-89
• CWE-89

• https://github.com/Enalean/tuleap/commit/ab12b686ced4cf233d3b15b08da008e0553eb6a6Patch, Third Party Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-6462-gfv9-jf83Third Party Advisory
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ab12b686ced4cf233d3b15b08da008e0553eb6a6Patch, Vendor Advisory
• https://tuleap.net/plugins/tracker/?aid=16213Vendor Advisory
• https://github.com/Enalean/tuleap/commit/ab12b686ced4cf233d3b15b08da008e0553eb6a6Patch, Third Party Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-6462-gfv9-jf83Third Party Advisory
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ab12b686ced4cf233d3b15b08da008e0553eb6a6Patch, Vendor Advisory
• https://tuleap.net/plugins/tracker/?aid=16213Vendor Advisory

Published

Oct 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41149Tough provides a set of Rust libraries and tools for using a…8.1
• CVE-2021-4115There is a flaw in polkit which can allow an unprivileged us…5.5
• CVE-2021-41150Tough provides a set of Rust libraries and tools for using a…6.5
• CVE-2021-41151Backstage is an open platform for building developer portals…4.9
• CVE-2021-41152OpenOlat is a web-based e-learning platform for teaching, le…7.7
• CVE-2021-41153The evm crate is a pure Rust implementation of Ethereum Virt…9.8
• CVE-2021-41155Tuleap is a Free & Open Source Suite to improve management o…8.8
• CVE-2021-41156anuko/timetracker is an, open source time tracking system. I…5.4
• CVE-2021-41157FreeSWITCH is a Software Defined Telecom Stack enabling the …5.3
• CVE-2021-41158FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2021-41159FreeRDP is a free implementation of the Remote Desktop Proto…8.8
• CVE-2021-4116yetiforcecrm is vulnerable to Improper Neutralization of Inp…5.4