8633 matches found
CVE-2025-64498
CVE-2025-64498 affects Tuleap: a Cross-Site Request Forgery (CSRF) vulnerability exists in Tuleap Community Edition < 17.0.99.1762444754 and Tuleap Enterprise Edition
CVE-2025-64498 Tuleap has a Cross-Site Request Forgery (CSRF) vulnerability
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 allow attackers trick victims into changing tracker general settings. Th...
CVE-2025-64498 Tuleap has a Cross-Site Request Forgery (CSRF) vulnerability
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 allow attackers trick victims into changing tracker general settings. Th...
EUVD-2025-201838
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 allow attackers trick victims into changing tracker general settings. Th...
EUVD-2025-201839
Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not...
CVE-2025-64497 Tuleap exposes releases for all projects to File Release System project administrators
Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Edition below 17.0-2, 16.13-7 and 16.12-10 allow attackers to access file release system information in projects they do not...
SUSE CVE-2025-65516
A stored cross-site scripting XSS vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the lin...
PT-2025-49608
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763126988 and Tuleap Enterprise Edition prior to 17.0-3 and 16.13-8 have missing CSRF protections which allow attackers to create or remove track...
CVE-2025-65516
A stored cross-site scripting XSS vulnerability was discovered in Seafile Community Edition prior to version 13.0.12. When Seafile is configured with the Golang file server, an attacker can upload a crafted SVG file containing malicious JavaScript and share it using a public link. Opening the lin...
GHSA-93F3-23RQ-PJFP vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-F2JV-R9RF-7988 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2021-23369 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2019-16776 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
CVE-2018-7408 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-PH34-PC88-72GC vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-Q42P-PG8M-CQH6 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-Q2C6-C6PM-G3GH vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
GHSA-3965-HPX2-Q597 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...