Skip to content
Enalean vulnerabilities
Newest
-
enalean tuleap
Tuleap is missing CSRF protection in the Overview inconsistent items
CVE-2026-24007
4.6 Medium
-
enalean tuleap
Tuleap has missing CSRF protections its in tracker field dependencies
CVE-2025-65962
4.6 Medium
-
enalean tuleap
Tuleap has missing CSRF protections in its tracker trigger management system
CVE-2025-64760
4.6 Medium
-
enalean tuleap
Tuleap is missing CSRF protections for its planning management API
CVE-2025-64499
4.6 Medium
-
enalean tuleap
Tuleap has a Cross-Site Request Forgery (CSRF) vulnerability
CVE-2025-64498
4.6 Medium
-
enalean tuleap
Tuleap exposes releases for all projects to File Release System project administrators
CVE-2025-64497
6.5 Medium
-
enalean tuleap
Tuleap missing CSRF protections in the File Release System
CVE-2025-64482
4.6 Medium
-
enalean tuleap
Tuleap missing CSRF protection in the management of SVN commit rules and immutable tags
CVE-2025-64117
4.6 Medium
-
enalean tuleap
Tuleap backlog item representations do not verify the permissions of the child trackers
CVE-2025-59040
4.3 Medium
-
enalean tuleap
Tuleap's special and always there fields permissions are not verified in cross-tracker search
CVE-2025-54877
5.3 Medium
-
enalean tuleap
Tuleap exposes artifacts to a mentioned user via email notifications
CVE-2025-53902
4.3 Medium
-
enalean tuleap
Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact
CVE-2025-53541
5.4 Medium
-
enalean tuleap
Tuleap vulnerable to user enumeration via the lost password form
CVE-2025-52899
5.3 Medium
-
enalean tuleap
Tuleap missing CSRF protection on tracker reports manipulation
CVE-2025-50179
4.6 Medium
-
enalean tuleap
Tuleap missing CSRF protection on tracker canned responses administration
CVE-2025-48991
4.6 Medium
-
enalean tuleap
Tuleap does not enforce read permissions on parent trackers in the REST API
CVE-2025-30155
4.3 Medium
-
enalean tuleap
Tuleap has improper permission handling in the REST endpoints and release notes display of the FRS plugin
CVE-2025-30209
5.3 Medium
-
enalean tuleap
Tuleap allows XSS via the content of RSS feeds in the RSS widgets
CVE-2025-30203
4.8 Medium
-
enalean tuleap
Tuleap is missing CSRF protection on tracker hierarchy administration
CVE-2025-29929
4.6 Medium
-
enalean tuleap
Tuleap has missing CSRF protections on artifact submission & edition from the tracker view
CVE-2025-29766
4.6 Medium
-
enalean tuleap
Tuleap is missing CSRF protections on tracker fields administrative operations
CVE-2025-27402
4.6 Medium
-
enalean tuleap
In Tuleap, deleting a report can delete criteria filters in other reports
CVE-2025-27401
4.6 Medium
-
enalean tuleap
Tuleap allows content injection via emails sent by the mass emailing features
CVE-2025-27156
4.1 Medium
-
enalean tuleap
Tuleap dumps the Redis password into the generated troubleshooting archives
CVE-2025-27150
5.3 Medium
-
enalean tuleap
Tuleap allows XSS via the tracker names used in the semantic timeframe deletion message
CVE-2025-27099
4.8 Medium
-
enalean tuleap
Tuleap allows default values to be cleared from field configuration
CVE-2025-27094
5.4 Medium
-
enalean tuleap
Initial effort field does not respect field permissions in the Taskboard REST card representation in Tuleap
CVE-2025-22129
4.3 Medium
-
enalean tuleap
Artifact permissions are not verified in the Cross Tracker Search widget in Tuleap
CVE-2025-24029
5.3 Medium
-
enalean tuleap
Tuleap vulnerable to XSS in the Gantt chart of the tracker plugin
CVE-2024-52599
5.4 Medium
-
enalean tuleap, tuleap enterprise +1 more
Tuleap lists trackers in the quick add actions of the backlog without any permissions check
CVE-2024-47767
4.3 Medium
-
enalean tuleap
Permissions are incorrectly verified for project administrators in the cross tracker search widget
CVE-2024-47766
4.9 Medium
-
enalean tuleap, tuleap enterprise +1 more
Tuleap does not properly check permissions for email notifications in trackers
CVE-2024-46988
4.8 Medium
-
enalean tuleap
Tuleap vulnerable to XSS in the HTML mail content of the cross reference field
CVE-2024-46980
4.8 Medium
-
enalean tuleap
Tuleap's recursive permissions to document manager folder are not properly applied
CVE-2024-39902
4.8 Medium
-
enalean tuleap
Tuleap has improper permissions of the backlog items
CVE-2024-37167
4.3 Medium
-
enalean tuleap
Tuleap deleting or moving an artifact can delete values from unrelated artifacts
CVE-2024-30246
7.6 High
-
enalean tuleap
Tuleap's mass update clears the permissions on artifact field
CVE-2024-25130
5.4 Medium
-
enalean tuleap
Tuleap's content of artifacts might be readable by unauthorized users
CVE-2024-23344
5.3 Medium
-
enalean tuleap
Tuleap vulnerable to Cross-site Scripting on the edition page of a release
CVE-2023-48715
5.4 Medium
-
enalean tuleap
Tuleap vulnerable to Cross-site Scripting on the success message of a kanban deletion
CVE-2023-39521
4.8 Medium
-
enalean tuleap
Tuleap allows preview of a linked artifact with a type does not respect permissions
CVE-2023-38508
6.5 Medium
-
enalean tuleap
Tuleap Cross-site Scripting vulnerability in the card field of the agile dashboard apps
CVE-2023-35929
5.4 Medium
-
enalean tuleap
User access not updated with privilege change in Tuleap
CVE-2023-35938
4.1 Medium
-
enalean tuleap
Tuleap vulnerable toXSS via the triggered job URL of a Jenkins job
CVE-2023-32072
4.8 Medium
-
enalean tuleap
XSS in the tooltip via an artifact title
CVE-2023-30619
5.4 Medium
-
enalean tuleap
Cross-site Scripting (XSS) through the name of a color of select box values in tuleap
CVE-2023-23938
5.9 Medium
-
enalean tuleap
Tuleap MediaWiki standalone "readers" can also edit pages
CVE-2022-23473
4.3 Medium
-
enalean tuleap
Tuleap dashboards vulnerable to Incorrect Authorization
CVE-2022-46160
4.3 Medium
-
enalean tuleap
Tuleap subject to Missing Authorization allowing for branch prefix modification
CVE-2022-39233
4.3 Medium
-
enalean tuleap
Fine grained permissions are not checked in Tuleap
CVE-2022-31128
5.4 Medium
- Show olderLoading…