| Package | Affected versions | Patched versions |
|---|---|---|
| tuleap | ≥ 16.4, < 16.4-6< 16.3-11< 16.4.99.1740567344 | 16.4-616.3-1116.4.99.1740567344 |
Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail clients. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740567344 and Tuleap Enterprise Edition 16.4-6 and 16.3-11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free