| Package | Affected versions | Patched versions |
|---|---|---|
| tuleap | ≥ 16.1, < 16.1-4< 16.0-7< 16.1.99.50 | 16.1-416.0-716.1.99.50 |
Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 16.1.99.50 and Tuleap Enterprise Edition prior to versions 16.1-4 and 16.0-7, a malicious user with the ability to create an artifact in a tracker with a Gantt chart could force a victim to execute uncontrolled code. Tuleap Community Edition 16.1.99.50, Tuleap Enterprise Edition 16.1-4, and Tuleap Enterprise Edition 16.0-7 contain a fix.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free