VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Dec 11, 2023· Updated Jun 17, 2026

CVE-2023-48715

CVE-2023-48715

Description

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and prior to versions 15.2-4 and 15.1-8 of Tuleap Enterprise Edition, the name of the releases are not properly escaped on the edition page of a release. A malicious user with the ability to create a FRS release could force a victim having write permissions in the FRS to execute uncontrolled code. Tuleap Community Edition 15.2.99.103, Tuleap Enterprise Edition 15.2-4, and Tuleap Enterprise Edition 15.1-8 contain a fix for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Enalean/Tuleap4 versions
    cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <15.2.99.103
    • cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <15.1-8
    • (no CPE)
    • (no CPE)range: < 15.2.99.103
  • Tuleap/Community Editionllm-fuzzy
    Range: <15.2.99.103
  • Tuleap/Enterprise Editionllm-fuzzy
    Range: <15.2-4, <15.1-8

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.