XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tuleap | Enalean | * | 7.2 (including) |