2024-02-06 17:00:42 +00:00
{
"id" : "CVE-2024-23344" ,
"sourceIdentifier" : "security-advisories@github.com" ,
"published" : "2024-02-06T16:15:52.120" ,
2024-02-06 19:00:36 +00:00
"lastModified" : "2024-02-06T17:52:56.963" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-02-06 17:00:42 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get access to restricted information when a process validates the permissions of multiple users (e.g. mail notifications). This issue has been patched in version 15.4.99.140 of Tuleap Community Edition."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "security-advisories@github.com" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "HIGH" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.3 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 1.6 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "security-advisories@github.com" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-200"
}
]
}
] ,
"references" : [
{
"url" : "https://github.com/Enalean/tuleap/commit/0329e21d268510bc00fed707406103edabf10e42" ,
"source" : "security-advisories@github.com"
} ,
{
"url" : "https://github.com/Enalean/tuleap/security/advisories/GHSA-m3v5-2j5q-x85w" ,
"source" : "security-advisories@github.com"
} ,
{
"url" : "https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=0329e21d268510bc00fed707406103edabf10e42" ,
"source" : "security-advisories@github.com"
} ,
{
"url" : "https://tuleap.net/plugins/tracker/?aid=35862" ,
"source" : "security-advisories@github.com"
}
]
}