CVE-2022-23473

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not properly verified when accessing MediaWiki standalone resources. Users with read only permissions for pages are able to also edit them. This only affects the MediaWiki standalone plugin. This issue is patched in versions Tuleap Community Edition 14.2.99.148, Tuleap Enterprise Edition 14.2-5, and Tuleap Enterprise Edition 14.1-6.

• CWE-863

• https://github.com/Enalean/tuleap/security/advisories/GHSA-c7rr-5vmc-rgcwPatch, Third Party Advisory
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=97cac78302170a883c1d60c9fa6dfd0d95854cb9Patch, Vendor Advisory
• https://tuleap.net/plugins/tracker/?aid=29645Issue Tracking, Patch, Vendor Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-c7rr-5vmc-rgcwPatch, Third Party Advisory
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=97cac78302170a883c1d60c9fa6dfd0d95854cb9Patch, Vendor Advisory
• https://tuleap.net/plugins/tracker/?aid=29645Issue Tracking, Patch, Vendor Advisory

Published

Dec 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23468xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-23469Traefik is an open source HTTP reverse proxy and load balanc…6.5
• CVE-2022-2347There exists an unchecked length field in UBoot. The U-Boot …7.1
• CVE-2022-23470Galaxy is an open-source platform for data analysis. An arbi…7.5
• CVE-2022-23471containerd is an open source container runtime. A bug was fo…6.5
• CVE-2022-23472Passeo is an open source python password generator. Versions…7.5
• CVE-2022-23474Editor.js is a block-style editor with clean JSON output. Ve…6.1
• CVE-2022-23475daloRADIUS is an open source RADIUS web management applicati…8.8
• CVE-2022-23476Nokogiri is an open source XML and HTML library for the Ruby…7.5
• CVE-2022-23477xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-23478xrdp is an open source project which provides a graphical lo…9.8
• CVE-2022-23479xrdp is an open source project which provides a graphical lo…9.8