CVE-2017-7981

    Dashboard / Vulnerabilities / CVE-2017-7981

    CVE-2017-7981

    Published: 29 Apr 2017Last Modified: 10 Apr 2026

    Summary:

    Details: Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project Wiki component because the proc_open PHP function is used within PhpWiki before 1.5.5 with a syntax value in its first argument, and an authenticated Tuleap user can control this value, even with shell metacharacters, as demonstrated by a '<?plugin SyntaxHighlighter syntax="c;id"' line to execute the id command.

    References: https://tuleap.net/file/shownotes.php?release_id=137#/linked-artifacts, https://www.exploit-db.com/exploits/41953/, https://tuleap.net/plugins/tracker/?aid=10159, https://github.com/xdrr/vulnerability-research/blob/master/webapp/tuleap/2017.04.tuleap-auth-ci.md

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -73f0e592300ee179c6accf599a777cb4461bd3b2

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High