CVE-2026-105412: SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5
Published Oct 12, 2026
·Updated
An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database.
Affected Software
1 affected component
Tuleap Tuleap Enterprise Edition=17.5
Event History
Oct 12, 2026
CVE Published
via MITRE·10:45 AM
Data Sourced
via MITRE·10:45 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that exploitation is network-accessible and requires low privileges. No user interaction is required.
2
What is the likely impact if exploited?
An attacker could obtain read access to the Tuleap database. The provided severity vector rates confidentiality impact as high and availability impact as low; it does not indicate an integrity impact.
3
Is a default deployment known to be affected?
The available information identifies Tuleap Enterprise Edition 17.5 as affected, but does not state whether the vulnerable condition is enabled or reachable in a default configuration.