Medium severity4.3NVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2024-37167

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users are able to see backlog items that they should not see. This issue has been patched in Tuleap Community Edition version 15.9.99.97.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enalean/Tuleap4 versions
cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <15.9.99.97
- cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <15.8-5
- (no CPE)range: before 15.9.99.97
- (no CPE)range: < 15.9.99.97

Patches

Vulnerability mechanics

References

github.com/Enalean/tuleap/commit/13eec93a353d2daf47bb8b9c548cc02f78b93a5envdPatch
github.com/Enalean/tuleap/security/advisories/GHSA-4c9f-284j-phvjnvdVendor Advisory
tuleap.net/plugins/tracker/nvdVendor Advisory
tuleap.net/plugins/git/tuleap/tuleap/stablenvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000