Enalean

Tuleap

71 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-53902

Exploit
  • EPSS 0.05%
  • Veröffentlicht 29.07.2025 19:36:10
  • Zuletzt bearbeitet 22.08.2025 15:30:09

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially...

5.4

CVE-2025-53541

  • EPSS 0.03%
  • Veröffentlicht 29.07.2025 19:27:38
  • Zuletzt bearbeitet 05.08.2025 14:19:08

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with ...

5.3

CVE-2025-52899

  • EPSS 0.05%
  • Veröffentlicht 29.07.2025 19:16:35
  • Zuletzt bearbeitet 22.08.2025 15:34:29

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password f...

4.3

CVE-2025-50179

  • EPSS 0.02%
  • Veröffentlicht 25.06.2025 15:48:24
  • Zuletzt bearbeitet 21.08.2025 20:53:46

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Ed...

4.3

CVE-2025-48991

  • EPSS 0.02%
  • Veröffentlicht 25.06.2025 14:07:47
  • Zuletzt bearbeitet 21.08.2025 20:49:34

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Community Edition prior to version 16.8.99.1748845907 and Tuleap Enterprise Edition prior to vers...

4.3

CVE-2025-30155

  • EPSS 0.18%
  • Veröffentlicht 31.03.2025 16:15:25
  • Zuletzt bearbeitet 21.08.2025 22:04:13

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 a...

4.8

CVE-2025-30203

  • EPSS 0.21%
  • Veröffentlicht 31.03.2025 16:15:25
  • Zuletzt bearbeitet 21.08.2025 22:03:06

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the content of RSS feeds in the RSS widgets. A project administrator or someone with control over an used RS...

5.3

CVE-2025-30209

  • EPSS 0.3%
  • Veröffentlicht 31.03.2025 16:15:25
  • Zuletzt bearbeitet 21.08.2025 21:59:27

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpoints it should not have access to. This vulnerability is fixed in Tulea...

4.3

CVE-2025-29929

  • EPSS 0.08%
  • Veröffentlicht 31.03.2025 16:15:24
  • Zuletzt bearbeitet 21.08.2025 22:07:11

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editi...

4.3

CVE-2025-29766

  • EPSS 0.08%
  • Veröffentlicht 31.03.2025 16:15:23
  • Zuletzt bearbeitet 21.08.2025 22:09:47

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims int...