Vulnerabilities (CVE)

Filtered by vendor Enalean Subscribe
Filtered by product Tuleap
Total 41 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-46980 1 Enalean 1 Tuleap 2024-10-16 N/A 4.8 MEDIUM
Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, a site administrator could create an artifact link type with a forward label allowing them to execute uncontrolled code (or at least achieve content injection) in a mail client. Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.