CVE-2024-23344

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Feb 6, 2024
Updated: Feb 15, 2024
CWE ID 200

Summary

CVE-2024-23344 is a vulnerability affecting Tuleap, an open-source software development and collaboration suite. This issue grants unauthorized access to restricted information during the process validation of user permissions, such as mail notifications. The vulnerability has been resolved in version 15.4.99.140 of the Tuleap Community Edition. Users are advised to update as soon as possible to mitigate this security risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share