CVE-2022-31063

Name of the Vulnerable Software and Affected Versions Tuleap versions prior to 13.9.99.111

Description The issue arises from the improper escaping of a document's title in the search result of the MyDocmanSearch widget and in the administration page of locked documents. This could allow a malicious user, who has the capability to create a document, to force a victim to execute uncontrolled code.

Recommendations For versions prior to 13.9.99.111, upgrade to a version that contains the fix for this issue. At the moment, there is no information about other mitigation measures for this issue.