high8.1
CVE-2026-105411
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with track…
Impact
An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.
Affected products
| Product | Affected versions |
|---|---|
| Tuleap Enterprise Edition From 17.0 | through 17.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.