Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tuleap allows XSS via the content of RSS feeds in the RSS widgets
Vulnerability Description
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the content of RSS feeds in the RSS widgets. A project administrator or someone with control over an used RSS feed could use this vulnerability to force victims to execute uncontrolled code. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742562878 and Tuleap Enterprise Edition 16.5-5 and 16.4-8.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:L
Vulnerability Type
Web页面编码URIScheme转义处理不恰当
Vulnerability Title
Tuleap 安全漏洞
Vulnerability Description
Tuleap是Enalean开源的一个开源套件，旨在改善软件开发和协作的管理。 Tuleap Community Edition 16.5.99.1742562878之前版本和Tuleap Enterprise Edition 16.5-5之前版本、16.4-8之前版本存在安全漏洞，该漏洞源于RSS小部件中的跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A