CVE-2022-46160 Tuleap dashboards vulnerable to Incorrect Authorization

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations are not properly verified when accessing the project "homepage"/dashboards. Users not authorized to access a project may still be able to...

CVE-2022-46160

Tuleap dashboards CVE-2022-46160 affects versions prior to 14.2.99.104 (Community Edition) and 14.2-4 / 14.1-5 (Enterprise). The root cause is improper verification of project-level authorizations when accessing a project homepage/dashboards, allowing users not authorized to the project to retrie...