CVE-2022-31128

🗓️ 01 Aug 2022 16:20:13Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 675 Views🌐 WEB

Tuleap does not properly verify permissions when creating branches with the REST API in Git repositorie

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-31128	1 Aug 202220:17	–	circl
CNNVD	Tuleap security vulnerabilities	1 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-31128 Fine grained permissions are not checked in Tuleap	1 Aug 202216:20	–	cvelist
EUVD	EUVD-2022-52758	3 Oct 202520:07	–	euvd
Mend	CVE-2022-31128	1 Aug 202216:20	–	mend
NVD	CVE-2022-31128	1 Aug 202217:15	–	nvd
osv_cve	CVE-2022-31128 Fine grained permissions are not checked in Tuleap	1 Aug 202216:20	–	osv_cve
Prion	Design/Logic Flaw	1 Aug 202217:15	–	prion
Positive Technologies	PT-2022-20549 · Unknown +1 · Tuleap Enterprise Edition +1	1 Aug 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-31128: Missing Authorization	1 Aug 202200:00	–	rapid7

NVD

Vulners

Node

enalean tuleapRange13.9.9.110–13.10.99.82community

enalean tuleapRange13.10–13.10-3enterprise

[
  {
    "product": "tuleap",
    "vendor": "Enalean",
    "versions": [
      {
        "status": "affected",
        "version": ">= >= 13.9.99.110, < 13.10.99.82"
      }
    ]
  }
]

Source	Link
github	www.github.com/Enalean/tuleap/security/advisories/GHSA-2p49-vgcx-5w79
tuleap	www.tuleap.net/plugins/tracker/
tuleap	www.tuleap.net/plugins/git/tuleap/tuleap/stable
github	www.github.com/Enalean/tuleap/commit/58ecb1dee1c46075d3e089980301ebfbe0bafd33

Parameter	Position	Path	Description	CWE
:id	path	/git/:id/branches	Tuleap fails to properly verify permissions when creating branches via the REST API in Git repositories using fine-grained permissions.	CWE-862