PT-2021-23124
CVE-2021-41142
·
تاريخ النشر
2021-10-14
·
تاريخ التحديث
2021-10-20
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Tuleap Community Edition versions prior to 12.11.99.25
Tuleap Enterprise Edition version 12.11-2
Description
There is a cross-site scripting issue in Tuleap Open ALM. A malicious user with the capability to add and remove attachments to an artifact could force a victim to execute uncontrolled code.
Recommendations
For Tuleap Community Edition versions prior to 12.11.99.25, update to version 11.17.99.146 or later.
For Tuleap Enterprise Edition version 12.11-2, ensure you have the fix for the issue, as it is already included in this version.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾