Tuleap Fixes Uncontrolled Code Execution Vulnerability in Mail Client
CVE-2024-46980
4.8MEDIUM
What is CVE-2024-46980?
Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, a site administrator could create an artifact link type with a forward label allowing them to execute uncontrolled code (or at least achieve content injection) in a mail client. Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.
Affected Version(s)
tuleap < 15.13.99.37 < 15.13.99.37
tuleap < 15.13-3 < 15.13-3
tuleap < 15.12-6 < 15.12-6