PT-2024-32322 · Unknown · Tuleap Community Edition+1

Manuel Vacelet + 1 · Published 2024-10-14 · Updated 2024-10-16 · CVE-2024-46988

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 15.13.99.40 Tuleap Enterprise Edition versions prior to 15.13-3 Tuleap Enterprise Edition versions prior to 15.12-6

Description Tuleap is a tool for end to end traceability of application and system developments. Users might receive email notifications with information they should not have access to.

Recommendations For Tuleap Community Edition versions prior to 15.13.99.40, update to version 15.13.99.40 or later. For Tuleap Enterprise Edition versions prior to 15.13-3, update to version 15.13-3 or later. For Tuleap Enterprise Edition versions prior to 15.12-6, update to version 15.12-6 or later.

Exploit

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

CWE-280

Related Identifiers

CVE-2024-46988

GHSA-G76G-HC92-96XW

Affected Products

Tuleap Community Edition

Tuleap Enterprise Edition

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/46xxx/CVE-2024-46988.json · Exploit
• 🔥 https://tuleap.net/plugins/tracker/?aid=39686 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-46988 · Security Note
• https://osv.dev/vulnerability/CVE-2024-46988 · Vendor Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-g76g-hc92-96xw · Note
• https://t.me/cvenotify/98282 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1846009479118065971 · Twitter Post
• https://t.me/cvedetector/7851 · Telegram Post
• https://twitter.com/CVEnew/status/1845892716288528514 · Twitter Post