Enalean Tuleap versions 7.4.99.5 and below suffer from a remote command execution vulnerability.