PT-2025-31261 · Unknown · Tuleap Community Edition+1

Antoine Sauzeau + 1 · Published 2025-07-29 · Updated 2025-07-29 · CVE-2025-53902

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.9.99.1752585665 Tuleap Enterprise Edition versions prior to 16.8-6 and 16.9-5

Description Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. Users may potentially access confidential information from artifacts that they are not authorized to view.

Recommendations Update Tuleap Community Edition to version 16.9.99.1752585665 or later. Update Tuleap Enterprise Edition to version 16.8-6 or later. Update Tuleap Enterprise Edition to version 16.9-5 or later.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-53902

GHSA-6F24-5V47-RJ6J

Affected Products

Tuleap Community Edition

Tuleap Enterprise Edition

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53902.json · Exploit
• https://github.com/Enalean/tuleap/commit/ebe054df8a2672afee41af84e5ba14b57ef8b789 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-53902 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53902 · Vendor Advisory
• https://tuleap.net/plugins/tracker/?aid=43704 · Vendor Advisory
• https://github.com/Enalean/tuleap/security/advisories/GHSA-6f24-5v47-rj6j · Note
• https://t.me/CVEtracker/28705 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1950323313915359565 · Twitter Post
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ebe054df8a2672afee41af84e5ba14b57ef8b789 · Note
• https://twitter.com/CVEnew/status/1950283173662691386 · Twitter Post