CVE-2025-24029 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the das…
Medium CVSS: 5.3

CVE-2025-24029

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Vendor
Enalean
Product
Tuleap
CWE
CWE-280
Yayın Tarihi
2025-02-03 22:15:28
Güncelleme
2025-08-22 15:59:15
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-280 Tuleap MEDIUM Enalean 2025

Referanslar

https://github.com/Enalean/tuleap/security/advisories/GHSA-hq46-63pc-xfv9 https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=269cbaa73bac6d1c50674c48c9987263f2b38804 https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=a97480f951351c0f8f2f3f27f7daa3f7f9c37c75 https://tuleap.net/plugins/tracker/?aid=41476