| Package | Affected versions | Patched versions |
|---|---|---|
| tuleap | ≥ 16.9, < 16.9-3< 16.8-5< 16.9.99.1751892857 | 16.9-316.8-516.9.99.1751892857 |
Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could insert malicious code when displaying the children of a parent artifact to force victims to execute the uncontrolled code. This is fixed in version Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free