PT-2025-31258 · Unknown · Tuleap Community Edition+1

Published 2025-07-29 · Updated 2025-08-22 · CVE-2025-52899

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.9.99.1750843170 Tuleap Enterprise Edition versions prior to 16.8-4 and 16.9-2

Description Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. The forgot password form allows for user enumeration.

Recommendations Update Tuleap Community Edition to version 16.9.99.1750843170. Update Tuleap Enterprise Edition to version 16.8-4. Update Tuleap Enterprise Edition to version 16.9-2.

Exploit

Fix

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2025-52899

GHSA-XQF3-XXXF-X3C2

Affected Products

Tuleap Community Edition

Tuleap Enterprise Edition

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52899.json · Exploit
• https://github.com/Enalean/tuleap/commit/5c72d6d253016d38ed472eb7918f772d074ddb07 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-52899 · Security Note
• https://tuleap.net/plugins/tracker/?aid=43674 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52899 · Vendor Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-xqf3-xxxf-x3c2 · Note
• https://twitter.com/CVEnew/status/1950280456970117358 · Twitter Post
• https://t.me/CVEtracker/28702 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1950330991777566746 · Twitter Post
• https://t.me/cveNotify/133188 · Telegram Post
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=5c72d6d253016d38ed472eb7918f772d074ddb07 · Note