Approved changes feed: RSS · Atom

cpe:2.3:a:enalean:tuleap_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnalean (a166e15a-856e-5e28-a167-52a4feec8e81)
ProductTuleap Enterprise (fe75fd02-79f7-5c3f-9ce6-8b05c8baa615)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47767 vulnerable 2026-06-08 06:48:13.132567 Tuleap lists trackers in the quick add actions of the backlog without any permissions check
MEDIUM (4.3)
Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, users might see tracker names they should not have access to. Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue.
Published: 2024-10-14T17:57:11.673Z
Updated: 2024-10-15T15:36:11.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46988 vulnerable 2026-06-08 06:48:10.959340 Tuleap does not properly check permissions for email notifications in trackers
MEDIUM (4.8)
Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, users might receive email notification with information they should not have access to. Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.
Published: 2024-10-14T17:44:53.489Z
Updated: 2024-10-15T15:40:00.721Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.