CVE-2026-105409 — Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

CVE-2026-105409

Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 PUBLISHED

Description (CNA)

A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's browser session.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / Tuleap Enterprise Edition	affected 17.0-1 through 17.0-41; affected 17.5-1 through 17.5-32

CWE

CWE-79

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-105409

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.