Tuleap Missing CSRF Protection Vulnerability in Tracker Canned Responses Administration

A vulnerability exists in Tuleap Community Edition prior to 16.8.99.1748845907 and Tuleap Enterprise Edition prior to 16.8-3 and 16.7-5, allowing for cross-site request forgery (CSRF) attacks. The issue arises from the absence of CSRF protection when creating, updating, or deleting canned responses within tracker administration. This vulnerability could be exploited to manipulate canned responses without proper authorization.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in canned responses, potentially disrupting workflow or communication within the affected Tuleap instance.

Reproduction

To reproduce this vulnerability, navigate to the 'Canned Responses' administration section of a tracker in Tuleap. Without the presence of CSRF protection, an attacker could craft a request to create, update, or delete a canned response, effectively tricking the user into making these changes without their consent.

Remediation

Users can upgrade to Tuleap Community Edition 16.8.99.1748845907, Tuleap Enterprise Edition 16.8-3, or Tuleap Enterprise Edition 16.7-5 to address this vulnerability.