← All advisories

Critical severity9.8OSV Advisory· Published Sep 21, 2018· Updated Jun 17, 2026

CVE-2018-17298

CVE-2018-17298

Description

An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Enalean/TuleapOSV3 versions
(expand)+ 2 more
- (no CPE)
- cpe:2.3:a:enalean:tuleap:*:*:*:*:*:*:*:*range: <10.5
- (no CPE)range: <10.5

Patches

Vulnerability mechanics

References

3

tuleap.net/plugins/git/tuleap/tuleap/stablenvdPatchVendor Advisory
tuleap.net/plugins/tracker/nvdPatchVendor Advisory
tuleap.net/plugins/git/tuleap/tuleap/stablenvdVendor Advisory

News mentions

0

No linked articles in our index yet.