Tuleap patches vulnerability in user permission validation

CVE-2024-23344

What is CVE-2024-23344?

Tuleap, an open-source suite designed to enhance software development and collaboration, has a vulnerability associated with misconfigured user permissions. This flaw allows unauthorized users to potentially access restricted information through certain processes, such as mail notifications, which do not correctly validate permission levels among multiple users. The issue affects versions of Tuleap prior to 15.4.99.140 and has been addressed in this release.

References