Beveiligingsadvies

CVE-2022-24896

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-06 19:30:15

Laatst bijgewerkt 2025-04-23 18:19:16

Toegewezen door GitHub_M

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retrieve the name of a tracker they cannot access as well as the name of the fields used in reports.

← Alle CVE's bekijken Bekijk op cve.org ↗