CVE-2014-8791

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection…

published December 2, 2014

CVSS

—

EPSS

15%

Percentile

96.7

In the wild

Unconfirmed

What it is

project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.14766 · 96.7th percentile
Published: 2014-12-02T01:00Z

EPSS history

Timeline

02 DEC 01:00Z
project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection…
cvelistv5