CVE-2024-46980

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6, a site administrator could create an artifact link type with a forward label allowing them to execute uncontrolled code (or at least achieve content injection) in a mail client. Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 15.13-3, and Tuleap Enterprise Edition 15.12-6 fix this issue.

• CWE-79

• https://github.com/Enalean/tuleap/commit/dd94a799982cd78ab06142008d745edf9e8fd494Patch
• https://github.com/Enalean/tuleap/security/advisories/GHSA-9fc9-47h6-82jjThird Party Advisory
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=dd94a799982cd78ab06142008d745edf9e8fd494Issue Tracking, Patch
• https://tuleap.net/plugins/tracker/?aid=39689Exploit, Third Party Advisory

Published

Oct 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-46975Kernel software installed and running inside a Guest VM may …7.9
• CVE-2024-46976Backstage is an open framework for building developer portal…5.4
• CVE-2024-46977OpenC3 COSMOS provides the functionality needed to send comm…6.5
• CVE-2024-46978XWiki Platform is a generic wiki platform offering runtime s…6.5
• CVE-2024-46979XWiki Platform is a generic wiki platform offering runtime s…5.3
• CVE-2024-4698The Testimonial Carousel For Elementor plugin for WordPress …6.4
• CVE-2024-46981Redis is an open source, in-memory database that persists on…9.8
• CVE-2024-46982Next.js is a React framework for building full-stack web app…7.5
• CVE-2024-46983sofa-hessian is an internal improved version of Hessian3/4 p…9.8
• CVE-2024-46984The reference validator is a tool to perform advanced valida…9.8
• CVE-2024-46985DataEase is an open source data visualization analysis tool.…7.5
• CVE-2024-46986Camaleon CMS is a dynamic and advanced content management sy…9.9