Threat Investigation
Request a demo

CVE-2023-30619

Medium

Description

Tuleap Open ALM is a Libre and Open Source tool for end to end traceability of application and system developments. The title of an artifact is not properly escaped in the tooltip. A malicious user with the capability to create an artifact or to edit a field title could force victim to execute uncontrolled code. This issue has been patched in version 14.7.99.143.

SeverityMedium
CVSS5.4
Exploit probability—
ProductEnalean Tuleap
PublishedMay 4, 2023
First seenMay 4, 2023
Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update
  • enalean tuleap14.7.99.143 or later

Affected products

ProductAffected versionsFixed in
enalean tuleap14.7.99.76 ≤ v < 14.7.99.14314.7.99.143

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.