Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XSS in the tooltip via an artifact title
Vulnerability Description
Tuleap Open ALM is a Libre and Open Source tool for end to end traceability of application and system developments. The title of an artifact is not properly escaped in the tooltip. A malicious user with the capability to create an artifact or to edit a field title could force victim to execute uncontrolled code. This issue has been patched in version 14.7.99.143.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Tuleap 跨站脚本漏洞
Vulnerability Description
Tuleap是开源的一个应用程序生命周期管理系统，可促进敏捷软件开发，设计项目，V模型，需求管理和IT服务管理。 Tuleap 14.7.99.143之前版本存在跨站脚本漏洞，该漏洞源于工具提示中工件标题未正确转义，具有创建工件或编辑字段标题能力的恶意用户可能会迫使受害者执行不受控制的代码。
CVSS Information
N/A
Vulnerability Type
N/A