VULNERABILITY INTELLIGENCE

CVE-2024-47766

CVSS score4.9 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2024-10-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, administrators of a project can access the content of trackers with permissions restrictions of project they are members of but not admin via the cross tracker search widget. Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue.

Weakness classification

security-advisories@github.com: CWE-280
nvd@nist.gov: CWE-755

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Exploit, Patch, Third Party Advisory
security-advisories@github.com — Issue Tracking, Patch
security-advisories@github.com — Exploit, Third Party Advisory