PT-2021-23124
CVE-2021-41142
·
Published
2021-10-14
·
Updated
2021-10-20
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Tuleap Community Edition versions prior to 12.11.99.25
Tuleap Enterprise Edition version 12.11-2
Description
There is a cross-site scripting issue in Tuleap Open ALM. A malicious user with the capability to add and remove attachments to an artifact could force a victim to execute uncontrolled code.
Recommendations
For Tuleap Community Edition versions prior to 12.11.99.25, update to version 11.17.99.146 or later.
For Tuleap Enterprise Edition version 12.11-2, ensure you have the fix for the issue, as it is already included in this version.
Found an issue in the description? Have something to add? Feel free to write us 👾