Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims into repairing inconsistent items (creating artifact links from the release). This vulnerability is fixed in Tuleap Community Edition 17.0.99.1768924735 and Tuleap Enterprise Edition 17.2-5, 17.1-6, and 17.0-9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-24007 Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An atta… https://www.cve.org/CVERecord?id=CVE-2026-24007
Post summary
A CVE-2026-24007 has been reported for Tuleap, detailing missing CSRF protection in the Overview inconsistent items. No PoC, exploit, active exploitation, or patch information is provided.
CVE-2026-24007 Cross-Site Request Forgery in Tuleap Overview Inconsistent Items Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24007
Post summary
The text merely lists CVE‑2026‑24007 as a CSRF issue in Tuleap’s Overview Inconsistent Items feature, providing no additional technical details, PoC, exploit, or mitigation information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | enalean | tuleap | - | - | - |
| App | enalean | tuleap | - | - | - |