CVE-2024-46988

Description

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, users might receive email notification with information they should not have access to. Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.

Reserved 2024-09-16 | Published 2024-10-14 | Updated 2024-10-15 | Assigner GitHub_M

Problem types

CWE-280: Improper Handling of Insufficient Permissions or Privileges

Product status

< 15.13.99.40
affected

< 15.13-3
affected

< 15.12-6
affected

References

github.com/...tuleap/security/advisories/GHSA-g76g-hc92-96xw

tuleap.net/plugins/tracker/?aid=39686

cve.org (CVE-2024-46988)

nvd.nist.gov (CVE-2024-46988)

Download JSON