Lucene search
+L

7 matches found

Prion
Prion
•added 2022/06/09 6:15 a.m.•28 views

Design/Logic Flaw

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

4CVSS4.6AI score0.00783EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2022/06/06 7:30 p.m.•9 views

CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

4.3CVSS4.6AI score0.00783EPSS
SaveExploits0References4
Mend
Mend
•added 2022/06/06 7:30 p.m.•6 views

CVE-2022-24896

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

5.3CVSS0.00783EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2022/06/06 7:30 p.m.•50 views

CVE-2022-24896 Tracker report renderer and chart widgets leak information in Tuleap

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

4.3CVSS4.8AI score0.00783EPSS
SaveExploits0References4
CVE
CVE
•added 2022/06/06 7:30 p.m.•90 views

CVE-2022-24896

CVE-2022-24896 affects Tuleap versions prior to 13.7.99.239. The vulnerability stems from improper authorization checks when displaying content in the Tracker Report Renderer and Chart widgets, allowing an attacker to disclose the name of trackers and the fields used in reports. Impact is informa...

4.3CVSS4.5AI score0.00783EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/06 12:00 a.m.•9 views

CVE-2022-24896: Missing Authorization

Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify authorizations when displaying the content of tracker report renderer and chart widgets. Malicious users could use this vulnerability to retriev...

4.3CVSS5.5AI score0.00783EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/06/06 12:00 a.m.•5 views

PT-2022-16965

Name of the Vulnerable Software and Affected Versions Tuleap versions prior to 13.7.99.239 Description The issue arises from improper authorization verification when displaying the content of tracker report renderer and chart widgets. This allows malicious users to retrieve the name of a tracker...

4.3CVSS0.00783EPSS
SaveExploits0References10
Rows per page
Query Builder