CVE-2024-25130
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.99.76 of Tuleap Community Edition and prior to versions 15.5-4 and 15.4-7 of Tuleap Enterprise Edition, users with a read access to a tracker where the mass update feature is used might get access to restricted information. Tuleap Community Edition 15.5.99.76, Tuleap Enterprise Edition 15.5-4, and Tuleap Enterprise Edition 15.4-7 contain a patch for this issue.
| Software | From | Fixed in |
|---|---|---|
| enalean / tuleap | 15.5 | 15.5-4 |
| enalean / tuleap | - | 15.4-7 |
| enalean / tuleap | - | 15.5.99.76 |
- https://github.com/Enalean/tuleap/commit/57978a32508f5c6d0365419b6eaeb368aee20667
- https://github.com/Enalean/tuleap/security/advisories/GHSA-mq7f-m6mj-hjj5
- https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=57978a32508f5c6d0365419b6eaeb368aee20667
- https://tuleap.net/plugins/tracker/?aid=36803
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime