Medium severity4.3NVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026

CVE-2022-23473

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not properly verified when accessing MediaWiki standalone resources. Users with read only permissions for pages are able to also edit them. This only affects the MediaWiki standalone plugin. This issue is patched in versions Tuleap Community Edition 14.2.99.148, Tuleap Enterprise Edition 14.2-5, and Tuleap Enterprise Edition 14.1-6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enalean/Tuleap3 versions
cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <14.2.99.148
- cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <14.1-6
- (no CPE)range: < 14.2.99.148
Tuleap/MediaWiki standalone pluginllm-create
Range: <14.2.99.148
Tuleap/Community Editionllm-fuzzy
Range: <14.2.99.148
Tuleap/Enterprise Editionllm-fuzzy
Range: <14.2-5, <14.1-6

Patches

Vulnerability mechanics

References

github.com/Enalean/tuleap/security/advisories/GHSA-c7rr-5vmc-rgcwnvdPatchThird Party Advisory
tuleap.net/plugins/git/tuleap/tuleap/stablenvdPatchVendor Advisory
tuleap.net/plugins/tracker/nvdIssue TrackingPatchVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000