Enalean tuleap

• CVE-2022-31058 High 7.2 SQL injection via the field name of a tracker in Tuleap 1.5%
• CVE-2022-31063 Medium 6.5 Cross site scripting via the title of a document in Tuleap 0.7%
• CVE-2022-31032 Medium 4.3 Resources of private projects can be exposed in Tuleap 1.0%
• CVE-2022-24896 Medium 4.3 Tracker report renderer and chart widgets leak information in Tuleap 0.8%
• CVE-2021-43806 High 8.8 SQL injection in Tuleap 1.6%
• CVE-2021-41276 Medium 6.7 Indirect LDAP injection in Tuleap 1.5%
• CVE-2021-43782 Medium 6.7 Indirect LDAP injection in Tuleap 1.4%
• CVE-2021-41154 High 8.8 SQL injection in the "SVN core" commits browser 1.5%
• CVE-2021-41155 High 8.8 SQL injection in CVS revisions browser 1.5%
• CVE-2021-41148 High 8.8 The update of the CI job targeted by a widget is vulnerable to blind SQL injections 1.5%
• CVE-2021-41147 High 7.2 SQL injection in the planning edition panel 1.9%
• CVE-2021-41142 Medium 5.4 XSS via the name of a deleted attachment 0.7%