CVE-2024-46988

MEDIUM Year: 2024
CVSS v3 Score
5.7
Medium
Weakness Type
CWE-280
View all →

Vulnerability Description

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, users might receive email notification with information they should not have access to. Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.

Related Vulnerabilities

CVE-2022-30727

MEDIUM
CVSS:5.5(Medium)

Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value in...

CWE-2802022

CVE-2024-35228

MEDIUM
CVSS:5.5(Medium)

Wagtail is an open source content management system built on Django. Due to an improperly applied permission check in the `wagtail.contrib.settings` module, a user with access to the Wagtail admin and...

CWE-2802024

CVE-2024-35301

MEDIUM
CVSS:5.5(Medium)

In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

CWE-2802024

CVE-2024-6302

MEDIUM
CVSS:5.5(Medium)

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send...

CWE-2802024

CVE-2025-31172

MEDIUM
CVSS:5.5(Medium)

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CWE-2802025

CVE-2025-46584

MEDIUM
CVSS:5.5(Medium)

Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CWE-2802025