CVE-2024-30246

CVSS V2 None CVSS V3 None
Description
Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not possible to control exactly which information is deleted. Information from theDate, File, Float, Int, List, OpenList, Text, and Permissions on artifact (this one can lead to the disclosure of restricted information) fields can be impacted. This vulnerability is fixed in Tuleap Community Edition version 15.7.99.6 and Tuleap Enterprise Edition 15.7-2, 15.6-5, 15.5-6, 15.4-8, 15.3-6, 15.2-5, 15.1-9, 15.0-9, and 14.12-6.
Overview
  • CVE ID
  • CVE-2024-30246
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-03-29T15:50:19.992Z
  • Last Modified Date
  • 2024-03-29T15:50:19.992Z
Weakness Enumerations
CWE URL
CWE-440 http://cwe.mitre.org/data/definitions/440.html
CWE-670 http://cwe.mitre.org/data/definitions/670.html
References
Reference URL Reference Tags
https://github.com/Enalean/tuleap/security/advisories/GHSA-jc7g-4pcv-8jcj x_refsource_CONFIRM
https://github.com/Enalean/tuleap/commit/a0ba0ae82a29eb8bfacef286778e5e49954f5316 x_refsource_MISC
https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=a0ba0ae82a29eb8bfacef286778e5e49954f5316 x_refsource_MISC
https://tuleap.net/plugins/tracker/?aid=37545 x_refsource_MISC
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-30246
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30246
History
Created Old Value New Value Data Type Notes
2024-06-26 11:20:40 Added to TrackCVE