PT-2025-5268 · Unknown · Tuleap Community Edition+1

Tgerbet

+1

·

Published

2025-02-03

·

Updated

2025-02-03

·

CVE-2025-24029

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.3.99.1737562605 Tuleap Enterprise Edition versions prior to 16.3-5 Tuleap Enterprise Edition versions prior to 16.2-7
Description Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users, possibly anonymous ones if the widget is used in the dashboard of a public project, might get access to artifacts they should not see.
Recommendations For Tuleap Community Edition versions prior to 16.3.99.1737562605, upgrade to version 16.3.99.1737562605 or later. For Tuleap Enterprise Edition versions prior to 16.3-5, upgrade to version 16.3-5 or later. For Tuleap Enterprise Edition versions prior to 16.2-7, upgrade to version 16.2-7 or later.

Exploit

Fix

Weakness Enumeration

CWE-280

Related Identifiers

CVE-2025-24029
GHSA-HQ46-63PC-XFV9

Affected Products

Tuleap Community Edition
Tuleap Enterprise Edition