Security Advisory
CVE-2014-7177
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a create action to plugins/tracker/.