Content of artifacts might be readable by unauthorized users
Package
Tuleap Community Edition
(tuleap)
Affected versions
>= 15.2.99.49 && < 15.4.99.140
Patched versions
15.4.99.140
Tuleap Enterprise Edition
(tuleap)
< 15.4-5
< 15.3-5
15.4-5
15.3-5
Impact
Some users might get access to restricted information when a process validates the permissions of multiple users (e.g. mail notifications).
Patches
The following versions contain the fix:
For more information
If you have any questions or comments about this advisory, reach out to us via the contact information provided on the Tuleap.org security page.
References