Tuleap Missing Cross-Site Request Forgery Protection in SVN Commit Rules Management

A vulnerability exists in Tuleap Community Edition prior to 16.13.99.1761813675 and Tuleap Enterprise Edition prior to 16.13-5 and 16.12-8, where cross-site request forgery (CSRF) protection is lacking in the management of Subversion (SVN) commit rules and immutable tags. This absence of CSRF protection could allow an attacker to manipulate the commit rules or immutable tags of an SVN repository by tricking users into performing these actions without proper authorization.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in SVN commit rules or immutable tags, potentially disrupting version control processes and repository management.

Remediation

Users can upgrade to Tuleap Community Edition 16.13.99.1761813675, Tuleap Enterprise Edition 16.13-5, or Tuleap Enterprise Edition 16.12-8 to address this vulnerability.