VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Oct 14, 2024· Updated Jun 17, 2026

CVE-2024-46988

CVE-2024-46988

Description

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, users might receive email notification with information they should not have access to. Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Enalean/Tuleap4 versions
    cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 3 more
    • cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <15.13.99.40
    • cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <15.12-6
    • (no CPE)range: <15.13.99.40, <15.13-3, <15.12-6
    • (no CPE)range: < 15.13.99.40
  • Tuleap/Tuleapllm-fuzzy
    Range: <15.13.99.40, <15.13-3, <15.12-6

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.