Tuleap Suite Vulnerability Could Lead to Information Disclosure

CVE-2024-30246

What is CVE-2024-30246?

A vulnerability in Tuleap, an Open Source Suite for software development management, poses a risk where a malicious user can delete instance information or gain unauthorized access to restricted artifacts. This exploitation can affect various fields such as Date, File, Float, Int, List, OpenList, Text, and Permissions, leading to potential loss of sensitive data. The ability to control which specific information is deleted is limited. It is critical for users of affected Tuleap versions to apply the necessary updates to mitigate these risks.

References