| Package | Affected versions | Patched versions |
|---|---|---|
| tuleap | ≥ 16.3, < 16.3-5< 16.2-7< 16.3.99.1737562605 | 16.3-516.2-716.3.99.1737562605 |
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free