Unrated severityNVD Advisory· Published Feb 22, 2024· Updated Aug 27, 2024
Tuleap's mass update clears the permissions on artifact field
CVE-2024-25130
Description
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.99.76 of Tuleap Community Edition and prior to versions 15.5-4 and 15.4-7 of Tuleap Enterprise Edition, users with a read access to a tracker where the mass update feature is used might get access to restricted information. Tuleap Community Edition 15.5.99.76, Tuleap Enterprise Edition 15.5-4, and Tuleap Enterprise Edition 15.4-7 contain a patch for this issue.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- github.com/Enalean/tuleap/commit/57978a32508f5c6d0365419b6eaeb368aee20667mitrex_refsource_MISC
- github.com/Enalean/tuleap/security/advisories/GHSA-mq7f-m6mj-hjj5mitrex_refsource_CONFIRM
- tuleap.net/plugins/git/tuleap/tuleap/stablemitrex_refsource_MISC
- tuleap.net/plugins/tracker/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.