CVE-2024-47767

Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-5, users might see tracker names they should not have access to. Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition 15.13-5, and Tuleap Enterprise Edition 15.12-8 fix this issue.

• CWE-280
• CWE-755

• https://github.com/Enalean/tuleap/commit/16d9efccb2fad8e10343be2604e94c9058ef2c89Patch
• https://github.com/Enalean/tuleap/commit/e5ce81279766115dc0f126a11d6b5065b5db7eecPatch
• https://github.com/Enalean/tuleap/commit/f89d7093d2c576ad5e2b35a6a096fcdaf563d1dfPatch
• https://github.com/Enalean/tuleap/security/advisories/GHSA-j342-v27q-329vExploit, Issue Tracking, Patch, Third Party Advisory
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=16d9efccb2fad8e10343be2604e94c9058ef2c89Issue Tracking, Patch
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=e5ce81279766115dc0f126a11d6b5065b5db7eecIssue Tracking, Patch
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=f89d7093d2c576ad5e2b35a6a096fcdaf563d1dfIssue Tracking, Patch
• https://tuleap.net/plugins/tracker/?aid=39728Exploit, Third Party Advisory

Published

Oct 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47761GLPI is a free asset and IT management software package. Sta…7.2
• CVE-2024-47762Backstage is an open framework for building developer portal…5.8
• CVE-2024-47763Wasmtime is an open source runtime for WebAssembly. Wasmtime…5.5
• CVE-2024-47764cookie is a basic HTTP cookie parser and serializer for HTTP…6.9
• CVE-2024-47765Minecraft MOTD Parser is a PHP library to parse minecraft se…6.1
• CVE-2024-47766Tuleap is a tool for end to end traceability of application …4.9
• CVE-2024-47768Lif Authentication Server is a server used by Lif to do vari…8.1
• CVE-2024-47769IDURAR is open source ERP CRM accounting invoicing software.…7.5
• CVE-2024-4777Memory safety bugs present in Firefox 125, Firefox ESR 115.1…8.8
• CVE-2024-47770Wazuh is a free and open source platform used for threat pre…8
• CVE-2024-47771Element Desktop is a Matrix client for desktop platforms. El…7
• CVE-2024-47772Discourse is an open source platform for community discussio…6.1