PT-2025-13799 · Unknown · Tuleap Community Edition+1

Tgerbet

+1

·

Published

2025-03-31

·

Updated

2025-08-21

·

CVE-2025-30209

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.5.99.1742812323 Tuleap Enterprise Edition versions prior to 16.5-6 and 16.4-10
Description The issue allows an attacker to access release notes content or information via the FRS REST endpoints that they should not have access to. This is a problem related to access control in the Tuleap software suite, which is used for managing software developments and collaboration.
Recommendations For Tuleap Community Edition versions prior to 16.5.99.1742812323, update to version 16.5.99.1742812323 or later. For Tuleap Enterprise Edition versions prior to 16.5-6, update to version 16.5-6 or later. For Tuleap Enterprise Edition versions prior to 16.4-10, update to version 16.4-10 or later. As a temporary workaround, consider restricting access to the FRS REST endpoints until a patch is applied.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-30209
GHSA-HCP5-PMPM-MGWH

Affected Products

Tuleap Community Edition
Tuleap Enterprise Edition