CVEvulnerability

CVE-2025-24029

5.3 MEDIUM Published 2025-02-03 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-280

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected configurations

• enalean tuleap (< 16.2-7) • enalean tuleap (< 16.3.99.1737562605) • enalean tuleap (>= 16.3 < 16.3-5)

Related

Weakness · CWE (1)

  • CWE-280 Improper Handling of Insufficient Permissions or Privileges weakness

References