Permissions are not properly checked for email notifications in trackers
Package
Tuleap Community Edition
(tuleap)
Affected versions
< 15.13.99.40
Patched versions
15.13.99.40
Tuleap Enterprise Edition
(tuleap)
< 15.13-3
< 15.12-6
15.13-3
15.12-6
Impact
Users might receive email notification with information they should not have access to.
Patches
The following versions contain the fix:
For more information
If you have any questions or comments about this advisory, reach out to us via the contact information provided on the Tuleap.org security page.
References