Filtered by vendor Enalean Subscriptions
Filtered by product Tuleap Subscriptions
Total 41 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-46980 1 Enalean 1 Tuleap 2024-10-16 4.8 Medium
Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, a site administrator could create an artifact link type with a forward label allowing them to execute uncontrolled code (or at least achieve content injection) in a mail client. Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.