CVE-2026-105411: CVE-2026-105411: güvenlik açığı

Açıklama (NVD)

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.

Özet bilgiler

CVSS v3.1

8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

%0,23 (yüzdelik 14)

CWE

CWE-639

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• www.3ds.com
• CWE-639