agentprime: enalean-tuleap

agentprime: enalean-tuleapEvery new CVE for enalean-tuleap.https://agentprime.io/CVE-2026-24007: Tuleap is missing CSRF protection in the Overview inconsistent itemshttps://agentprime.io/advisories/CVE-2026-24007/https://agentprime.io/advisories/CVE-2026-24007/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 19:52:51 GMTCVECVE-2025-65962: Tuleap has missing CSRF protections its in tracker field dependencieshttps://agentprime.io/advisories/CVE-2025-65962/https://agentprime.io/advisories/CVE-2025-65962/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Dec 2025 23:15:02 GMTCVECVE-2025-64760: Tuleap has missing CSRF protections in its tracker trigger management systemhttps://agentprime.io/advisories/CVE-2025-64760/https://agentprime.io/advisories/CVE-2025-64760/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Dec 2025 23:08:22 GMTCVECVE-2025-64499: Tuleap is missing CSRF protections for its planning management APIhttps://agentprime.io/advisories/CVE-2025-64499/https://agentprime.io/advisories/CVE-2025-64499/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Dec 2025 22:44:29 GMTCVECVE-2025-64498: Tuleap has a Cross-Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-64498/https://agentprime.io/advisories/CVE-2025-64498/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Dec 2025 22:36:26 GMTCVECVE-2025-64497: Tuleap exposes releases for all projects to File Release System project administratorshttps://agentprime.io/advisories/CVE-2025-64497/https://agentprime.io/advisories/CVE-2025-64497/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Dec 2025 22:28:49 GMTCVECVE-2025-64482: Tuleap missing CSRF protections in the File Release Systemhttps://agentprime.io/advisories/CVE-2025-64482/https://agentprime.io/advisories/CVE-2025-64482/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 21:37:25 GMTCVECVE-2025-64117: Tuleap missing CSRF protection in the management of SVN commit rules and immutable tagshttps://agentprime.io/advisories/CVE-2025-64117/https://agentprime.io/advisories/CVE-2025-64117/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 19:12:42 GMTCVECVE-2025-59040: Tuleap backlog item representations do not verify the permissions of the child trackershttps://agentprime.io/advisories/CVE-2025-59040/https://agentprime.io/advisories/CVE-2025-59040/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Sep 2025 14:28:41 GMTCVECVE-2025-54877: Tuleap's special and always there fields permissions are not verified in cross-tracker searchhttps://agentprime.io/advisories/CVE-2025-54877/https://agentprime.io/advisories/CVE-2025-54877/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Aug 2025 15:07:54 GMTCVECVE-2025-53902: Tuleap exposes artifacts to a mentioned user via email notificationshttps://agentprime.io/advisories/CVE-2025-53902/https://agentprime.io/advisories/CVE-2025-53902/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Jul 2025 19:36:10 GMTCVECVE-2025-53541: Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifacthttps://agentprime.io/advisories/CVE-2025-53541/https://agentprime.io/advisories/CVE-2025-53541/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Jul 2025 19:27:38 GMTCVECVE-2025-52899: Tuleap vulnerable to user enumeration via the lost password formhttps://agentprime.io/advisories/CVE-2025-52899/https://agentprime.io/advisories/CVE-2025-52899/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Jul 2025 19:16:35 GMTCVECVE-2025-50179: Tuleap missing CSRF protection on tracker reports manipulationhttps://agentprime.io/advisories/CVE-2025-50179/https://agentprime.io/advisories/CVE-2025-50179/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Jun 2025 15:48:24 GMTCVECVE-2025-48991: Tuleap missing CSRF protection on tracker canned responses administrationhttps://agentprime.io/advisories/CVE-2025-48991/https://agentprime.io/advisories/CVE-2025-48991/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Jun 2025 14:07:47 GMTCVECVE-2025-30155: Tuleap does not enforce read permissions on parent trackers in the REST APIhttps://agentprime.io/advisories/CVE-2025-30155/https://agentprime.io/advisories/CVE-2025-30155/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:58:30 GMTCVECVE-2025-30209: Tuleap has improper permission handling in the REST endpoints and release notes display of the FRS pluginhttps://agentprime.io/advisories/CVE-2025-30209/https://agentprime.io/advisories/CVE-2025-30209/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:53:46 GMTCVECVE-2025-30203: Tuleap allows XSS via the content of RSS feeds in the RSS widgetshttps://agentprime.io/advisories/CVE-2025-30203/https://agentprime.io/advisories/CVE-2025-30203/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:48:49 GMTCVECVE-2025-29929: Tuleap is missing CSRF protection on tracker hierarchy administrationhttps://agentprime.io/advisories/CVE-2025-29929/https://agentprime.io/advisories/CVE-2025-29929/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:40:58 GMTCVECVE-2025-29766: Tuleap has missing CSRF protections on artifact submission & edition from the tracker viewhttps://agentprime.io/advisories/CVE-2025-29766/https://agentprime.io/advisories/CVE-2025-29766/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:38:00 GMTCVECVE-2025-27402: Tuleap is missing CSRF protections on tracker fields administrative operationshttps://agentprime.io/advisories/CVE-2025-27402/https://agentprime.io/advisories/CVE-2025-27402/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 17:00:49 GMTCVECVE-2025-27401: In Tuleap, deleting a report can delete criteria filters in other reportshttps://agentprime.io/advisories/CVE-2025-27401/https://agentprime.io/advisories/CVE-2025-27401/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 16:58:18 GMTCVECVE-2025-27156: Tuleap allows content injection via emails sent by the mass emailing featureshttps://agentprime.io/advisories/CVE-2025-27156/https://agentprime.io/advisories/CVE-2025-27156/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 16:53:49 GMTCVECVE-2025-27150: Tuleap dumps the Redis password into the generated troubleshooting archiveshttps://agentprime.io/advisories/CVE-2025-27150/https://agentprime.io/advisories/CVE-2025-27150/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 16:48:43 GMTCVECVE-2025-27099: Tuleap allows XSS via the tracker names used in the semantic timeframe deletion messagehttps://agentprime.io/advisories/CVE-2025-27099/https://agentprime.io/advisories/CVE-2025-27099/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Mar 2025 15:54:33 GMTCVECVE-2025-27094: Tuleap allows default values to be cleared from field configurationhttps://agentprime.io/advisories/CVE-2025-27094/https://agentprime.io/advisories/CVE-2025-27094/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Mar 2025 15:51:01 GMTCVECVE-2025-22129: Initial effort field does not respect field permissions in the Taskboard REST card representation in Tuleaphttps://agentprime.io/advisories/CVE-2025-22129/https://agentprime.io/advisories/CVE-2025-22129/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Feb 2025 21:28:55 GMTCVECVE-2025-24029: Artifact permissions are not verified in the Cross Tracker Search widget in Tuleaphttps://agentprime.io/advisories/CVE-2025-24029/https://agentprime.io/advisories/CVE-2025-24029/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Feb 2025 21:26:38 GMTCVECVE-2024-52599: Tuleap vulnerable to XSS in the Gantt chart of the tracker pluginhttps://agentprime.io/advisories/CVE-2024-52599/https://agentprime.io/advisories/CVE-2024-52599/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Dec 2024 18:41:35 GMTCVECVE-2024-47767: Tuleap lists trackers in the quick add actions of the backlog without any permissions checkhttps://agentprime.io/advisories/CVE-2024-47767/https://agentprime.io/advisories/CVE-2024-47767/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:57:11 GMTCVECVE-2024-47766: Permissions are incorrectly verified for project administrators in the cross tracker search widgethttps://agentprime.io/advisories/CVE-2024-47766/https://agentprime.io/advisories/CVE-2024-47766/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:53:55 GMTCVECVE-2024-46988: Tuleap does not properly check permissions for email notifications in trackershttps://agentprime.io/advisories/CVE-2024-46988/https://agentprime.io/advisories/CVE-2024-46988/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:44:53 GMTCVECVE-2024-46980: Tuleap vulnerable to XSS in the HTML mail content of the cross reference fieldhttps://agentprime.io/advisories/CVE-2024-46980/https://agentprime.io/advisories/CVE-2024-46980/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Oct 2024 17:41:58 GMTCVECVE-2024-39902: Tuleap's recursive permissions to document manager folder are not properly appliedhttps://agentprime.io/advisories/CVE-2024-39902/https://agentprime.io/advisories/CVE-2024-39902/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 22 Jul 2024 14:10:11 GMTCVECVE-2024-37167: Tuleap has improper permissions of the backlog itemshttps://agentprime.io/advisories/CVE-2024-37167/https://agentprime.io/advisories/CVE-2024-37167/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:28:32 GMTCVECVE-2024-30246: Tuleap deleting or moving an artifact can delete values from unrelated artifactshttps://agentprime.io/advisories/CVE-2024-30246/https://agentprime.io/advisories/CVE-2024-30246/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 15:50:19 GMTCVECVE-2024-25130: Tuleap's mass update clears the permissions on artifact fieldhttps://agentprime.io/advisories/CVE-2024-25130/https://agentprime.io/advisories/CVE-2024-25130/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Feb 2024 18:29:10 GMTCVECVE-2024-23344: Tuleap's content of artifacts might be readable by unauthorized usershttps://agentprime.io/advisories/CVE-2024-23344/https://agentprime.io/advisories/CVE-2024-23344/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Feb 2024 15:58:19 GMTCVECVE-2023-48715: Tuleap vulnerable to Cross-site Scripting on the edition page of a releasehttps://agentprime.io/advisories/CVE-2023-48715/https://agentprime.io/advisories/CVE-2023-48715/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Dec 2023 18:40:10 GMTCVECVE-2023-39521: Tuleap vulnerable to Cross-site Scripting on the success message of a kanban deletionhttps://agentprime.io/advisories/CVE-2023-39521/https://agentprime.io/advisories/CVE-2023-39521/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Aug 2023 22:40:02 GMTCVECVE-2023-38508: Tuleap allows preview of a linked artifact with a type does not respect permissionshttps://agentprime.io/advisories/CVE-2023-38508/https://agentprime.io/advisories/CVE-2023-38508/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Aug 2023 22:33:35 GMTCVECVE-2023-35929: Tuleap Cross-site Scripting vulnerability in the card field of the agile dashboard appshttps://agentprime.io/advisories/CVE-2023-35929/https://agentprime.io/advisories/CVE-2023-35929/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jul 2023 17:30:22 GMTCVECVE-2023-35938: User access not updated with privilege change in Tuleaphttps://agentprime.io/advisories/CVE-2023-35938/https://agentprime.io/advisories/CVE-2023-35938/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jun 2023 19:33:59 GMTCVECVE-2023-32072: Tuleap vulnerable toXSS via the triggered job URL of a Jenkins jobhttps://agentprime.io/advisories/CVE-2023-32072/https://agentprime.io/advisories/CVE-2023-32072/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 May 2023 20:00:42 GMTCVECVE-2023-30619: XSS in the tooltip via an artifact titlehttps://agentprime.io/advisories/CVE-2023-30619/https://agentprime.io/advisories/CVE-2023-30619/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 04 May 2023 13:35:35 GMTCVECVE-2023-23938: Cross-site Scripting (XSS) through the name of a color of select box values in tuleaphttps://agentprime.io/advisories/CVE-2023-23938/https://agentprime.io/advisories/CVE-2023-23938/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Apr 2023 16:58:11 GMTCVECVE-2022-23473: Tuleap MediaWiki standalone "readers" can also edit pageshttps://agentprime.io/advisories/CVE-2022-23473/https://agentprime.io/advisories/CVE-2022-23473/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Dec 2022 06:46:17 GMTCVECVE-2022-46160: Tuleap dashboards vulnerable to Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2022-46160/https://agentprime.io/advisories/CVE-2022-46160/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Dec 2022 06:40:05 GMTCVECVE-2022-39233: Tuleap subject to Missing Authorization allowing for branch prefix modificationhttps://agentprime.io/advisories/CVE-2022-39233/https://agentprime.io/advisories/CVE-2022-39233/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Oct 2022 00:00:00 GMTCVECVE-2022-31128: Fine grained permissions are not checked in Tuleaphttps://agentprime.io/advisories/CVE-2022-31128/https://agentprime.io/advisories/CVE-2022-31128/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Aug 2022 16:20:13 GMTCVE