CVE-2025-29766 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & ed…
Medium CVSS: 4.6

CVE-2025-29766

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. The vulnerability is fixed in Tuleap Community Edition 16.5.99.1741784483 and Tuleap Enterprise Edition 16.5-3 and 16.4-8.
Vendor
Enalean
Product
Tuleap
CWE
CWE-352
Yayın Tarihi
2025-03-31 16:15:23
Güncelleme
2025-08-21 22:09:47
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-352 Tuleap MEDIUM Enalean 2025

Referanslar

https://github.com/Enalean/tuleap/commit/81f45330fdcc1329cc71eddf4d04b80c340b3b93 https://github.com/Enalean/tuleap/security/advisories/GHSA-6p9q-p2q4-3rqx https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=81f45330fdcc1329cc71eddf4d04b80c340b3b93 https://tuleap.net/plugins/tracker/?aid=42208