Vulnerabilidades en Enalean
62 resultadosCVE-2023-48715MEDIUMTuleap vulnerable to Cross-site Scripting on the edition page of a releaseEPSS 0.5%CVE-2024-47766MEDIUMPermissions are incorrectly verified for project administrators in the cross tracker search widgetEPSS 0.5%CVE-2024-25130MEDIUMTuleap's mass update clears the permissions on artifact fieldEPSS 0.5%CVE-2022-23473MEDIUMTuleap MediaWiki standalone "readers" can also edit pagesEPSS 0.5%CVE-2023-35929MEDIUMTuleap Cross-site Scripting vulnerability in the card field of the agile dashboard appsEPSS 0.5%CVE-2023-32072MEDIUMTuleap vulnerable toXSS via the triggered job URL of a Jenkins jobEPSS 0.5%CVE-2023-30619MEDIUMXSS in the tooltip via an artifact titleEPSS 0.5%CVE-2023-23938MEDIUMCross-site Scripting (XSS) through the name of a color of select box values in tuleapEPSS 0.5%CVE-2024-47767MEDIUMTuleap lists trackers in the quick add actions of the backlog without any permissions checkEPSS 0.4%CVE-2025-30209MEDIUMTuleap has improper permission handling in the REST endpoints and release notes display of the FRS pluginEPSS 0.4%CVE-2024-46980MEDIUMTuleap vulnerable to XSS in the HTML mail content of the cross reference fieldEPSS 0.4%CVE-2025-27150MEDIUMTuleap dumps the Redis password into the generated troubleshooting archivesEPSS 0.4%CVE-2025-53902MEDIUMTuleap exposes artifacts to a mentioned user via email notificationsEPSS 0.4%CVE-2025-27094MEDIUMTuleap allows default values to be cleared from field configurationEPSS 0.4%CVE-2024-37167MEDIUMTuleap has improper permissions of the backlog itemsEPSS 0.4%CVE-2024-46988MEDIUMTuleap does not properly check permissions for email notifications in trackersEPSS 0.4%CVE-2025-24029MEDIUMArtifact permissions are not verified in the Cross Tracker Search widget in TuleapEPSS 0.4%CVE-2025-52899MEDIUMTuleap vulnerable to user enumeration via the lost password formEPSS 0.3%CVE-2025-59040MEDIUMTuleap backlog item representations do not verify the permissions of the child trackersEPSS 0.3%CVE-2025-30155MEDIUMTuleap does not enforce read permissions on parent trackers in the REST APIEPSS 0.3%