CVE-2025-29929 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administ…
Medium CVSS: 4.6

CVE-2025-29929

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742306712 and Tuleap Enterprise Edition 16.5-5 and 16.4-8.
Vendor
Enalean
Product
Tuleap
CWE
CWE-352
Yayın Tarihi
2025-03-31 16:15:24
Güncelleme
2025-08-21 22:07:11
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-352 Tuleap MEDIUM Enalean 2025

Referanslar

https://github.com/Enalean/tuleap/commit/dce61747f3a169da1f6b585ad5e6e0847fa3c950 https://github.com/Enalean/tuleap/security/advisories/GHSA-hqqr-p5f6-26vv https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=dce61747f3a169da1f6b585ad5e6e0847fa3c950 https://tuleap.net/plugins/tracker/?aid=42231