| Package | Affected versions | Patched versions |
|---|---|---|
| tuleap | ≥ 16.9, < 16.9-2< 16.8-4< 16.9.99.1750843170 | 16.9-216.8-416.9.99.1750843170 |
Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed in Tuleap Community Edition version 16.9.99.1750843170 and Tuleap Enterprise Edition 16.8-4 and 16.9-2.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free