CVE-2022-31063
29.06.2022, 18:15
Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.111 the title of a document is not properly escaped in the search result of MyDocmanSearch widget and in the administration page of the locked documents. A malicious user with the capability to create a document could force victim to execute uncontrolled code. Users are advised to upgrade. There are no known workarounds for this issue.
| Vendor | Product | Version |
|---|---|---|
| enalean | tuleap | 𝑥 < 13.9.99.111 |
| enalean | tuleap | 13.8.0 ≤ 𝑥 < 13.8.6 |
| enalean | tuleap | 13.9.0 ≤ 𝑥 < 13.9.3 |
𝑥
= Vulnerable software versions
References