uleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 16.1.99.50 and Tuleap Enterprise Edition prior to versions 16.1-4 and 16.0-7, a malicious user with the ability to create an artifact in a tracker with a Gantt chart could force a victim to execute uncontrolled code. Tuleap Community Edition 16.1.99.50, Tuleap Enterprise Edition 16.1-4, and Tuleap Enterprise Edition 16.0-7 contain a fix.
| Link | Resource |
|---|---|
| https://github.com/Enalean/tuleap/commit/d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5 | Patch |
| https://github.com/Enalean/tuleap/security/advisories/GHSA-489c-fm2j-qjw7 | Third Party Advisory Patch |
| https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5 | Permissions Required |
| https://tuleap.net/plugins/tracker/?aid=40459 | Third Party Advisory Issue Tracking Patch Exploit |
Configuration 1 (hide)
|
22 Aug 2025, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Enalean/tuleap/commit/d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5 - Patch | |
| References | () https://github.com/Enalean/tuleap/security/advisories/GHSA-489c-fm2j-qjw7 - Third Party Advisory, Patch | |
| References | () https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=d3686ab152b6f64ff835e7dd3c99d97b36a9d4d5 - Permissions Required | |
| References | () https://tuleap.net/plugins/tracker/?aid=40459 - Third Party Advisory, Issue Tracking, Patch, Exploit | |
| First Time |
Enalean
Enalean tuleap |
|
| CPE | cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:* cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:* |
09 Dec 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2024-12-09 19:15
Updated : 2025-08-22 16:19
NVD link : CVE-2024-52599
Mitre link : CVE-2024-52599
CVE.ORG link : CVE-2024-52599
JSON object : View
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')