PT-2025-4366 · Unknown · Tuleap Community Edition+1

Tgerbet + 1 · Published 2025-02-03 · Updated 2025-02-04 · CVE-2025-22129

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.3.99.1736242932 Tuleap Enterprise Edition versions prior to 16.2-5 Tuleap Enterprise Edition versions prior to 16.3-2

Description An unauthorized user might get access to restricted information in affected versions of Tuleap.

Recommendations For Tuleap Community Edition versions prior to 16.3.99.1736242932, upgrade to version 16.3.99.1736242932. For Tuleap Enterprise Edition versions prior to 16.2-5, upgrade to version 16.2-5. For Tuleap Enterprise Edition versions prior to 16.3-2, upgrade to version 16.3-2.

Exploit

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2025-22129

GHSA-F34G-WC2M-MF76

Affected Products

Tuleap Community Edition

Tuleap Enterprise Edition

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22129.json · Exploit
• 🔥 https://tuleap.net/plugins/tracker/?aid=41434 · Exploit
• https://github.com/Enalean/tuleap/security/advisories/GHSA-f34g-wc2m-mf76 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-22129 · Security Note
• https://osv.dev/vulnerability/CVE-2025-22129 · Vendor Advisory
• https://t.me/cvedetector/17122 · Telegram Post
• https://twitter.com/CVEnew/status/1886529629206536457 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1886566937804595515 · Twitter Post
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=3edf8158ba40be66f0b661888b8b2805784795d1 · Note
• https://t.me/cvenotify/109782 · Telegram Post