← voltar
CVE-2025-53541

Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact

CVSS 5.4 MEDIUMEPSS 0.2%CWE-79
Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could insert malicious code when displaying the children of a parent artifact to force victims to execute the uncontrolled code. This is fixed in version Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
Produtos afetados
Enalean · tuleap

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →