Tuleap Fixes Security Vulnerability in Tracker Feature
CVE-2024-25130
6.5MEDIUM
What is CVE-2024-25130?
Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.99.76 of Tuleap Community Edition and prior to versions 15.5-4 and 15.4-7 of Tuleap Enterprise Edition, users with a read access to a tracker where the mass update feature is used might get access to restricted information. Tuleap Community Edition 15.5.99.76, Tuleap Enterprise Edition 15.5-4, and Tuleap Enterprise Edition 15.4-7 contain a patch for this issue.
Affected Version(s)
tuleap < 15.5.99.76 < 15.5.99.76
tuleap >= 15.5, < 15.5-4 < 15.5, 15.5-4
tuleap < 15.4-7 < 15.4-7