PT-2023-30918 · Unknown · Tuleap Enterprise Edition+1
Lesuisse
·
Publicado
2023-12-11
·
Atualizado
2024-02-22
·
CVE-2023-48715
CVSS v3.1
5.4
Média
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Tuleap Community Edition versions prior to 15.2.99.103
Tuleap Enterprise Edition versions prior to 15.2-4 and 15.1-8
Description
Tuleap is an open source suite to improve management of software developments and collaboration. The name of the releases is not properly escaped on the edition page of a release. A malicious user with the ability to create a FRS release could force a victim having write permissions in the FRS to execute uncontrolled code.
Recommendations
For Tuleap Community Edition versions prior to 15.2.99.103, update to version 15.2.99.103 or later.
For Tuleap Enterprise Edition versions prior to 15.2-4, update to version 15.2-4 or later.
For Tuleap Enterprise Edition versions prior to 15.1-8, update to version 15.1-8 or later.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tuleap Community Edition
Tuleap Enterprise Edition