Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2024-46988

Tuleap does not properly check permissions for email notifications in trackers

Description

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, users might receive email notification with information they should not have access to. Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Enalean tuleap

  • < 15.13.99.40affected
  • < 15.13-3affected
  • < 15.12-6affected

References