CVE-2024-23344CWE-200

Tuleap's content of artifacts might be readable by unauthorized users

Medium · published February 6, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get access to restricted information when a process validates the permissions of multiple users (e.g. mail notifications). This issue has been patched in version 15.4.99.140 of Tuleap Community Edition.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-02-06T15:58Z
EPSS history
Timeline
  • 06 FEB 15:58Z
    Tuleap's content of artifacts might be readable by unauthorized users
    cvelistv5