PT-2022-24829 · Tuleap+1 · Tuleap+1

Rossettoy + 1 · Published 2022-10-19 · Updated 2023-07-14 · CVE-2022-39233

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tuleap versions 12.9.99.228 through 14.0.99.23

Description The issue concerns improper verification of authorizations when updating the branch prefix used by the GitLab repository integration. Authenticated users can change the branch prefix of any GitLab repository integration they can see via the REST endpoint PATCH /gitlab repositories/{id}, an action that should be restricted to Git administrators.

Recommendations For Tuleap versions 12.9.99.228 through 14.0.99.23, update to Tuleap Community Edition 14.0.99.24 or Tuleap Enterprise Edition 14.0-3 to resolve the issue. As a temporary workaround, consider restricting access to the PATCH /gitlab repositories/{id} endpoint to only allow Git administrators to make changes.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-39233

GHSA-3884-972X-3CCQ

Affected Products

Gitlab

Tuleap

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39233.json · Exploit
• 🔥 https://tuleap.net/plugins/tracker/?aid=28848 · Exploit
• https://github.com/Enalean/tuleap/commit/a06cb42d55c840d61a484472ed6b169ab23853ac · Patch
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=a06cb42d55c840d61a484472ed6b169ab23853ac · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39233 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39233 · Vendor Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-3884-972x-3ccq · Note
• https://t.me/cibsecurity/51753 · Telegram Post