CVEs-PoC/2014/CVE-2014-7177.md

CVE-2014-7177

Description

XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/.

POC

Reference

• http://seclists.org/fulldisclosure/2014/Oct/120
• http://seclists.org/fulldisclosure/2014/Oct/120

Github

No PoCs found on GitHub currently.