Vulnerabilidades en Enalean
62 resultadosCVE-2025-22129MEDIUMInitial effort field does not respect field permissions in the Taskboard REST card representation in TuleapEPSS 0.3%CVE-2025-27401MEDIUMIn Tuleap, deleting a report can delete criteria filters in other reportsEPSS 0.3%CVE-2024-52599MEDIUMTuleap vulnerable to XSS in the Gantt chart of the tracker pluginEPSS 0.3%CVE-2024-39902MEDIUMTuleap's recursive permissions to document manager folder are not properly appliedEPSS 0.3%CVE-2025-54877MEDIUMTuleap's special and always there fields permissions are not verified in cross-tracker searchEPSS 0.3%CVE-2025-30203MEDIUMTuleap allows XSS via the content of RSS feeds in the RSS widgetsEPSS 0.3%CVE-2025-27099MEDIUMTuleap allows XSS via the tracker names used in the semantic timeframe deletion messageEPSS 0.3%CVE-2025-64497MEDIUMTuleap exposes releases for all projects to File Release System project administratorsEPSS 0.3%CVE-2025-27156MEDIUMTuleap allows content injection via emails sent by the mass emailing featuresEPSS 0.3%CVE-2025-53541MEDIUMTuleap is vulnerable to XSS attacks when displaying the children of a parent artifactEPSS 0.3%CVE-2025-29766MEDIUMTuleap has missing CSRF protections on artifact submission & edition from the tracker viewEPSS 0.2%CVE-2025-29929MEDIUMTuleap is missing CSRF protection on tracker hierarchy administrationEPSS 0.2%CVE-2025-50179MEDIUMTuleap missing CSRF protection on tracker reports manipulationEPSS 0.2%CVE-2025-48991MEDIUMTuleap missing CSRF protection on tracker canned responses administrationEPSS 0.2%CVE-2025-27402MEDIUMTuleap is missing CSRF protections on tracker fields administrative operationsEPSS 0.2%CVE-2025-65962MEDIUMTuleap has missing CSRF protections its in tracker field dependenciesEPSS 0.2%CVE-2026-24007MEDIUMTuleap is missing CSRF protection in the Overview inconsistent itemsEPSS 0.2%CVE-2025-64117MEDIUMTuleap missing CSRF protection in the management of SVN commit rules and immutable tagsEPSS 0.1%CVE-2025-64482MEDIUMTuleap missing CSRF protections in the File Release SystemEPSS 0.1%CVE-2025-64760MEDIUMTuleap has missing CSRF protections in its tracker trigger management systemEPSS 0.1%