Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47748 State: PUBLISHED Published: 2024-10-21T12:14:14.448Z Last Updated: 2025-11-03T22:21:42.762Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: vhost_vdpa: assign irq bypass producer token correctly We used to call irq_bypass_unregister_producer() in vhost_vdpa_setup_vq_irq() which is problematic as we don't know if the token pointer is still valid or not. Actually, we use the eventfd_ctx as the token so the life cycle of the token should be bound to the VHOST_SET_VRING_CALL instead of vhost_vdpa_setup_vq_irq() which could be called by set_status(). Fixing this by setting up irq bypass producer's token when ha
vdpa_setup_vq_irq() which could be called by set_status(). Fixing this by setting up irq bypass producer's token when handling VHOST_SET_VRING_CALL and un-registering the producer before calling vhost_vring_ioctl() to prevent a possible use after free as eventfd could have been released in vhost_vring_ioctl(). And such registering and unregistering will only be done if DRIVER_OK is set. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/0c170b1e918b9afac25e2bbd01eaa2bfc0ece8c0 - https://git.kernel.org/stable/c/927a2580208e0f9b0b47b08f1c802b7233a7ba3c - https://git.kernel.org/stable/c/ec5f1b54ceb23475049ada6e7a43452cf4df88
able/c/927a2580208e0f9b0b47b08f1c802b7233a7ba3c - https://git.kernel.org/stable/c/ec5f1b54ceb23475049ada6e7a43452cf4df88d1 - https://git.kernel.org/stable/c/ca64edd7ae93402af2596a952e0d94d545e2b9c0 - https://git.kernel.org/stable/c/fae9b1776f53aab93ab345bdbf653b991aed717d - https://git.kernel.org/stable/c/7cf2fb51175cafe01df8c43fa15a06194a59c6e2 - https://git.kernel.org/stable/c/02e9e9366fefe461719da5d173385b6685f70319
CVE ID: CVE-2024-47749 State: PUBLISHED Published: 2024-10-21T12:14:15.126Z Last Updated: 2025-11-03T22:21:44.230Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added NULL check for lookup_atid The lookup_atid() function can return NULL if the ATID is invalid or does not exist in the identifier table, which could lead to dereferencing a null pointer without a check in the `act_establish()` and `act_open_rpl()` functions. Add a NULL check to prevent null pointer dereferencing. Found by Linux Verification Center (linuxtesting.org) with SVACE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container:
cation Center (linuxtesting.org) with SVACE. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/b12e25d91c7f97958341538c7dc63ee49d01548f - https://git.kernel.org/stable/c/4e1fe68d695af367506ea3c794c5969630f21697 - https://git.kernel.org/stable/c/dd598ac57dcae796cb58551074660c39b43fb155 - https://git.kernel.org/stable/c/b11318dc8a1ec565300bb1a9073095af817cc508 - https://git.kernel.org/stable/c/39cb9f39913566ec5865581135f3e8123ad1aee1 - https://git.kernel.org/stable/c/0d50ae281a1712b9b2ca72830a96b8f11882358d - https://git.kernel.org/stable/c/54aaa3ed40972511e423b604324b881425b9ff1e - https://git.kernel.org/stable/c/b9c94c8b
8d - https://git.kernel.org/stable/c/54aaa3ed40972511e423b604324b881425b9ff1e - https://git.kernel.org/stable/c/b9c94c8ba5a713817cffd74c4bacc05187469624 - https://git.kernel.org/stable/c/e766e6a92410ca269161de059fff0843b8ddd65f
CVE ID: CVE-2024-47750 State: PUBLISHED Published: 2024-10-21T12:14:15.786Z Last Updated: 2025-11-03T22:21:45.725Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08 Currently rsv_qp is freed before ib_unregister_device() is called on HIP08. During the time interval, users can still dereg MR and rsv_qp will be used in this process, leading to a UAF. Move the release of rsv_qp after calling ib_unregister_device() to fix it. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2ccf1c75d39949d8ea043d04a2e92d7100ea723d -
hment: - CVE Program Container: References: - https://git.kernel.org/stable/c/2ccf1c75d39949d8ea043d04a2e92d7100ea723d - https://git.kernel.org/stable/c/d2d9c5127122745da6e887f451dd248cfeffca33 - https://git.kernel.org/stable/c/dac2723d8bfa9cf5333f477741e6e5fa1ed34645 - https://git.kernel.org/stable/c/60595923371c2ebe7faf82536c47eb0c967e3425 - https://git.kernel.org/stable/c/fd8489294dd2beefb70f12ec4f6132aeec61a4d0
CVE ID: CVE-2024-47751 State: PUBLISHED Published: 2024-10-21T12:14:16.446Z Last Updated: 2025-11-03T22:21:47.254Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port() Within kirin_pcie_parse_port(), the pcie->num_slots is compared to pcie->gpio_id_reset size (MAX_PCI_SLOTS) which is correct and would lead to an overflow. Thus, fix condition to pcie->num_slots + 1 >= MAX_PCI_SLOTS and move pcie->num_slots increment below the if-statement to avoid out-of-bounds array access. Found by Linux Verification Center (linuxtesting.org) with SVACE. [kwilczynski: commit log] Additional
ds array access. Found by Linux Verification Center (linuxtesting.org) with SVACE. [kwilczynski: commit log] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/a5f795f9412854df28e66679c5e6b68b0b79c229 - https://git.kernel.org/stable/c/95248d7497bcbfe7deed4805469c6ff6ddd7f9d1 - https://git.kernel.org/stable/c/6dcc5b49d6607a741a14122bf3105f3ac50d259e - https://git.kernel.org/stable/c/aeb0335971806e15ac91e838ca471936c8e7efd5 - https://git.kernel.org/stable/c/c500a86693a126c9393e602741e348f80f1b0fc5
CVE ID: CVE-2024-47752 State: PUBLISHED Published: 2024-10-21T12:14:17.097Z Last Updated: 2025-05-04T09:39:07.587Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning Fix a smatch static checker warning on vdec_h264_req_if.c. Which leads to a kernel crash when fb is NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/c6b9f971b43980de8893610f606d751131fb5d86 - https://git.kernel.org/stable/c/18181b0c1c5bd43846e5e0ae3d61a4a1adceab03 - https://git.kernel.org/stable/c/790d1848fac5ac3b1c474f66162598ab07a20c21 - https://gi
1c5bd43846e5e0ae3d61a4a1adceab03 - https://git.kernel.org/stable/c/790d1848fac5ac3b1c474f66162598ab07a20c21 - https://git.kernel.org/stable/c/7878d3a385efab560dce793b595447867fb163f2
CVE ID: CVE-2024-47753 State: PUBLISHED Published: 2024-10-21T12:14:17.776Z Last Updated: 2025-11-03T19:31:24.840Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning Fix a smatch static checker warning on vdec_vp8_req_if.c. Which leads to a kernel crash when fb is NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/4e0713c79cf5d0b549fa855e230ade1ff83c27d7 - https://git.kernel.org/stable/c/dbe5b7373801c261f3ea118145fbb2caac5f9324 - https://git.kernel.org/stable/c/35cc704622b3a9bc02a4755d5ba802
l.org/stable/c/dbe5b7373801c261f3ea118145fbb2caac5f9324 - https://git.kernel.org/stable/c/35cc704622b3a9bc02a4755d5ba80238eee3cdc2 - https://git.kernel.org/stable/c/3167aa42941b68405a092df114453ef0f1b09c2c - https://git.kernel.org/stable/c/b113bc7c0e83b32f4dd2d291a2b6c4803e0a2c44
CVE ID: CVE-2024-47754 State: PUBLISHED Published: 2024-10-21T12:14:18.427Z Last Updated: 2025-11-03T19:31:26.225Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning Fix a smatch static checker warning on vdec_h264_req_multi_if.c. Which leads to a kernel crash when fb is NULL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/d48890ef8765001caff732ac6ec80a3b2e470215 - https://git.kernel.org/stable/c/588bcce9e64cc5138858ab562268eb3943c5b06c - https://git.kernel.org/stable/c/47b3b97930913ca7
ps://git.kernel.org/stable/c/588bcce9e64cc5138858ab562268eb3943c5b06c - https://git.kernel.org/stable/c/47b3b97930913ca74a595cc12bdbb650259afc6e - https://git.kernel.org/stable/c/301f7778263116388c20521a1a641067647ab31c - https://git.kernel.org/stable/c/9be85491619f1953b8a29590ca630be571941ffa
CVE ID: CVE-2024-47755 State: REJECTED Published: 2024-10-21T12:14:19.107Z Last Updated: 2024-10-23T06:08:20.948Z Description: No description available.
CVE ID: CVE-2024-47756 State: PUBLISHED Published: 2024-10-21T12:14:19.768Z Last Updated: 2025-11-03T22:21:48.719Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in ks_pcie_quirk() This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition. [kwilczynski: commit log] Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/9c9afc3e75069fcfb067727973242cfbf00dd7eb - https://git.kernel.org/stable/c/c289903b7a216df5ea6e
/git.kernel.org/stable/c/9c9afc3e75069fcfb067727973242cfbf00dd7eb - https://git.kernel.org/stable/c/c289903b7a216df5ea6e1850ddf1b958eea9921d - https://git.kernel.org/stable/c/dc5aeba07395c8dfa29bb878c8ce4d5180427221 - https://git.kernel.org/stable/c/23838bef2adb714ec37b2d6141dccf4a3a70bdef - https://git.kernel.org/stable/c/e85ab507882db165c10a858d7f685a0a38f0312e - https://git.kernel.org/stable/c/72210e52e19a27f615e0b5273d2bf012d0dc318d - https://git.kernel.org/stable/c/2171c5cb2fbc3e03af7e8116cd58736c09328655 - https://git.kernel.org/stable/c/6188a1c762eb9bbd444f47696eda77a5eae6207a
CVE ID: CVE-2024-47757 State: PUBLISHED Published: 2024-10-21T12:14:20.419Z Last Updated: 2025-11-03T22:21:50.178Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in nilfs_btree_check_delete() The function nilfs_btree_check_delete(), which checks whether degeneration to direct mapping occurs before deleting a b-tree entry, causes memory access outside the block buffer when retrieving the maximum key if the root node has no entries. This does not usually happen because b-tree mappings with 0 child nodes are never created by mkfs.nilfs2 or nilfs2 itself. However, it can happen if the b-tree root node
ngs with 0 child nodes are never created by mkfs.nilfs2 or nilfs2 itself. However, it can happen if the b-tree root node read from a device is configured that way, so fix this potential issue by adding a check for that case. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f3a9859767c7aea758976f5523903d247e585129 - https://git.kernel.org/stable/c/ed76d381dae125b81d09934e365391a656249da8 - https://git.kernel.org/stable/c/d20674f31626e0596ae4c1d9401dfb6739b81b58 - https://git.kernel.org/stable/c/c4f8554996e8ada3be872dfb8f60e93bcf15fb27 - https://git.kernel.org/stable/c/a8abfda768b9f33630cfbc4af6c4214f1e5681b0 - https://gi
96e8ada3be872dfb8f60e93bcf15fb27 - https://git.kernel.org/stable/c/a8abfda768b9f33630cfbc4af6c4214f1e5681b0 - https://git.kernel.org/stable/c/257f9e5185eb6de83377caea686c306e22e871f2 - https://git.kernel.org/stable/c/a33e967b681e088a125b979975c93e3453e686cd - https://git.kernel.org/stable/c/c4cbcc64bb31e67e02940ce060cc77f7180564cf - https://git.kernel.org/stable/c/f9c96351aa6718b42a9f42eaf7adce0356bdb5e8
CVE ID: CVE-2024-47758 State: PUBLISHED Published: 2024-12-11T15:50:22.285Z Last Updated: 2024-12-11T17:10:22.033Z Vendors: glpi-project Products: glpi Problem Types: CWE-284 Description: GLPI is a free asset and IT management software package. Starting in version 9.3.0 and prior to version 10.0.17, an authenticated user can use the API to take control of any user that have the same or a lower level of privileges. Version 10.0.17 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-3r4x-6pmx-phwr - https://github.com/glpi-project/glpi/releases/tag/10.0.17
CVE ID: CVE-2024-47759 State: PUBLISHED Published: 2024-11-15T17:42:00.532Z Last Updated: 2024-11-21T14:55:31.413Z Vendors: glpi-project Products: glpi Problem Types: CWE-79 Description: GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-474f-9vpp-xxq5
CVE ID: CVE-2024-47760 State: PUBLISHED Published: 2024-12-11T16:56:57.600Z Last Updated: 2024-12-11T20:16:34.813Z Vendors: glpi-project Products: glpi Problem Types: CWE-284 Description: GLPI is a free asset and IT management software package. Starting in version 9.1.0 and prior to version 10.0.17, a technician with an access to the API can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-r3mx-fr5f-gwgp - https://github.com/glpi-project/glpi/releases/tag/10.0.17
CVE ID: CVE-2024-47761 State: PUBLISHED Published: 2024-12-11T17:00:49.124Z Last Updated: 2024-12-12T15:15:33.980Z Vendors: glpi-project Products: glpi Problem Types: CWE-287 Description: GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an administrator with access to the sent notifications contents can take control of an account with higher privileges. Version 10.0.17 contains a patch for this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/glpi-project/glpi/security/advisories/GHSA-x794-564w-vgxx - https://github.com/glpi-project/glpi/releases/tag/10.0.17
CVE ID: CVE-2024-47762 State: PUBLISHED Published: 2024-10-03T17:14:34.529Z Last Updated: 2024-10-03T17:40:40.551Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: backstage Products: backstage Problem Types: CWE-440 Description: Backstage is an open framework for building developer portals. Configuration supplied through APP_CONFIG_* environment variables, for example APP_CONFIG_backend_listen_port=7007, where unexpectedly ignoring the visibility defined in configuration schema. This occurred even if the configuration schema specified that they should have backend or secret visibility. This was an intended feature of the APP_CONFIG_* way of supplying configu
they should have backend or secret visibility. This was an intended feature of the APP_CONFIG_* way of supplying configuration, but now clearly goes against the expected behavior of the configuration system. This behavior leads to a risk of potentially exposing sensitive configuration details intended to remain private or restricted to backend processes. The issue has been resolved in version 0.3.75 of the @backstage/plugin-app-backend package. As a temporary measure, avoid supplying secrets using the APP_CONFIG_ configuration pattern. Consider alternative methods for setting secrets, such as the environment substitution available for Backstage configuration. Additional Analyst Notes: - CISA
ng secrets, such as the environment substitution available for Backstage configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/backstage/backstage/security/advisories/GHSA-qc4v-xq2m-65wc - https://github.com/backstage/backstage/commit/323e6129073c5cb4cc106a1239eaec31a129554f
CVE ID: CVE-2024-47763 State: PUBLISHED Published: 2024-10-09T18:03:33.944Z Last Updated: 2024-10-09T19:50:25.886Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: bytecodealliance Products: wasmtime Problem Types: CWE-670 Description: Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if Wasmtime was compiled with Rust 1.80 or prior. The runtime crash is a deterministic process abort when Wasmtime is compiled with Rust 1.81 and later. WebAssembly tail calls are a proposal whi
eterministic process abort when Wasmtime is compiled with Rust 1.81 and later. WebAssembly tail calls are a proposal which relatively recently reached stage 4 in the standardization process. Wasmtime first enabled support for tail calls by default in Wasmtime 21.0.0, although that release contained a bug where it was only on-by-default for some configurations. In Wasmtime 22.0.0 tail calls were enabled by default for all configurations. The specific crash happens when an exported function in a WebAssembly module (or component) performs a `return_call` (or `return_call_indirect` or `return_call_ref`) to an imported host function which captures a stack trace (for example, the host function rai
ect` or `return_call_ref`) to an imported host function which captures a stack trace (for example, the host function raises a trap). In this situation, the stack-walking code previously assumed there was always at least one WebAssembly frame on the stack but with tail calls that is no longer true. With the tail-call proposal it's possible to have an entry trampoline appear as if it directly called the exit trampoline. This situation triggers an internal assert in the stack-walking code which raises a Rust `panic!()`. When Wasmtime is compiled with Rust versions 1.80 and prior this means that an `extern "C"` function in Rust is raising a `panic!()`. This is technically undefined behavior and
or this means that an `extern "C"` function in Rust is raising a `panic!()`. This is technically undefined behavior and typically manifests as a process abort when the unwinder fails to unwind Cranelift-generated frames. When Wasmtime is compiled with Rust versions 1.81 and later this panic becomes a deterministic process abort. Overall the impact of this issue is that this is a denial-of-service vector where a malicious WebAssembly module or component can cause the host to crash. There is no other impact at this time other than availability of a service as the result of the crash is always a crash and no more. This issue was discovered by routine fuzzing performed by the Wasmtime project vi
e crash is always a crash and no more. This issue was discovered by routine fuzzing performed by the Wasmtime project via Google's OSS-Fuzz infrastructure. We have no evidence that it has ever been exploited by an attacker in the wild. All versions of Wasmtime which have tail calls enabled by default have been patched: * 21.0.x - patched in 21.0.2 * 22.0.x - patched in 22.0.1 * 23.0.x - patched in 23.0.3 * 24.0.x - patched in 24.0.1 * 25.0.x - patched in 25.0.2. Wasmtime versions from 12.0.x (the first release with experimental tail call support) to 20.0.x (the last release with tail-calls off-by-default) have support for tail calls but the support is disabled by default. These versions are
with tail-calls off-by-default) have support for tail calls but the support is disabled by default. These versions are not affected in their default configurations, but users who explicitly enabled tail call support will need to either disable tail call support or upgrade to a patched version of Wasmtime. The main workaround for this issue is to disable tail support for tail calls in Wasmtime, for example with `Config::wasm_tail_call(false)`. Users are otherwise encouraged to upgrade to patched versions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q8hx-mm92-4wvg - https://github.com/bytecodealliance/w
s://github.com/bytecodealliance/wasmtime/security/advisories/GHSA-q8hx-mm92-4wvg - https://github.com/bytecodealliance/wasmtime/pull/8540 - https://github.com/bytecodealliance/wasmtime/pull/8682 - https://docs.rs/wasmtime/latest/wasmtime/struct.Config.html#method.wasm_tail_call - https://github.com/WebAssembly/proposals - https://github.com/webassembly/tail-call
CVE ID: CVE-2024-47764 State: PUBLISHED Published: 2024-10-04T19:09:46.640Z Last Updated: 2024-10-04T20:14:56.059Z Vendors: jshttp Products: cookie Problem Types: CWE-74 Description: cookie is a basic HTTP cookie parser and serializer for HTTP servers. The cookie name could be used to set other fields of the cookie, resulting in an unexpected cookie value. A similar escape can be used for path and domain, which could be abused to alter other fields of the cookie. Upgrade to 0.7.0, which updates the validation for name, path, and domain. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jshttp/cookie/security/advisories/GHSA-pxg6-pf52-xh8x - https://github.co
Vulnrichment: References: - https://github.com/jshttp/cookie/security/advisories/GHSA-pxg6-pf52-xh8x - https://github.com/jshttp/cookie/pull/167 - https://github.com/jshttp/cookie/commit/e10042845354fea83bd8f34af72475eed1dadf5c
CVE ID: CVE-2024-47765 State: PUBLISHED Published: 2024-10-04T14:20:24.412Z Last Updated: 2024-10-04T16:09:22.623Z Vendors: jgniecki Products: MinecraftMotdParser Problem Types: CWE-79, CWE-80 Description: Minecraft MOTD Parser is a PHP library to parse minecraft server motd. The HtmlGenerator class is subject to potential cross-site scripting (XSS) attack through a parsed malformed Minecraft server MOTD. The HtmlGenerator iterates through objects of MotdItem that are contained in an object of MotdItemCollection to generate a HTML string. An attacker can make malicious inputs to the color and text properties of MotdItem to inject own HTML into a web page during web page generation. For examp
ts to the color and text properties of MotdItem to inject own HTML into a web page during web page generation. For example by sending a malicious MOTD from a Minecraft server under their control that was queried and passed to the HtmlGenerator. This XSS vulnerability exists because the values of these properties are neither filtered nor escaped. This vulnerability is fixed in 1.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jgniecki/MinecraftMotdParser/security/advisories/GHSA-q898-frwq-f3qp - https://github.com/jgniecki/MinecraftMotdParser/commit/b0ab9d68a964cd3d74977f39a9e7af0a94509f7c
CVE ID: CVE-2024-47766 State: PUBLISHED Published: 2024-10-14T17:53:55.763Z Last Updated: 2024-10-15T15:37:35.456Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Enalean Products: tuleap Problem Types: CWE-280 Description: Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, administrators of a project can access the content of trackers with permissions restrictions of project they are members of but not admin via the cross tracker search widget. Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edi
mbers of but not admin via the cross tracker search widget. Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Enalean/tuleap/security/advisories/GHSA-qfrh-fv84-93hx - https://github.com/Enalean/tuleap/commit/529d11b70796589767dd27a40ebadf3eaf8f5674 - https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=529d11b70796589767dd27a40ebadf3eaf8f5674 - https://tuleap.net/plugins/tracker/?aid=39736