VYPR
← All advisories
Medium severity5.4NVD Advisory· Published May 4, 2023· Updated Jun 17, 2026

CVE-2023-30619

CVE-2023-30619

Description

Tuleap Open ALM is a Libre and Open Source tool for end to end traceability of application and system developments. The title of an artifact is not properly escaped in the tooltip. A malicious user with the capability to create an artifact or to edit a field title could force victim to execute uncontrolled code. This issue has been patched in version 14.7.99.143.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Enalean/Tuleap3 versions
    cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 2 more
    • cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: >=14.7.99.76,<14.7.99.143
    • (no CPE)range: >=14.7.99.143
    • (no CPE)range: >= 14.7.99.76, < 14.7.99.143
  • Tuleap/Tuleap Open ALMllm-fuzzy
    Range: >=14.7.99.143

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.