PT-2025-31260 · Unknown · Tuleap Community Edition+1

Lesuisse · Published 2025-07-29 · Updated 2025-08-05 · CVE-2025-53541

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.9.99.1751892857 Tuleap Enterprise Edition versions prior to 16.8-5 and 16.9-3

Description Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. Malicious users with some control over certain artifacts could insert malicious code when displaying the children of a parent artifact, potentially forcing victims to execute uncontrolled code.

Recommendations Update Tuleap Community Edition to version 16.9.99.1751892857 or later. Update Tuleap Enterprise Edition to version 16.8-5 or later. Update Tuleap Enterprise Edition to version 16.9-3 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-53541

GHSA-6R66-J76J-RWHW

Affected Products

Tuleap Community Edition

Tuleap Enterprise Edition

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53541.json · Exploit
• 🔥 https://tuleap.net/plugins/tracker/?aid=43693 · Exploit
• https://github.com/Enalean/tuleap/security/advisories/GHSA-6r66-j76j-rwhw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-53541 · Vendor Advisory
• http://github.com/Enalean/tuleap/commit/c1aec8247697d63dc4af791ecd6bd70d105ded08 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-53541 · Security Note
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=c1aec8247697d63dc4af791ecd6bd70d105ded08 · Note
• https://t.me/cveNotify/130906 · Telegram Post
• https://t.me/CVEtracker/28704 · Telegram Post
• https://twitter.com/CVEnew/status/1950280454910693414 · Twitter Post