| Package | Affected versions | Patched versions |
|---|---|---|
| tuleap | ≥ 16.5, < 16.5-3< 16.4-8< 16.5.99.1741784483 | 16.5-316.4-816.5.99.1741784483 |
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. The vulnerability is fixed in Tuleap Community Edition 16.5.99.1741784483 and Tuleap Enterprise Edition 16.5-3 and 16.4-8.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free