Lucene search
+L

668 matches found

NVD
NVD
added 2025/09/18 3:15 p.m.10 views

CVE-2025-59040

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition...

4.3CVSS0.00332EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/09/18 2:28 p.m.19 views

CVE-2025-59040 Tuleap backlog item representations do not verify the permissions of the child trackers

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition...

4.3CVSS0.00332EPSS
SaveExploits0References4
OSV
OSV
added 2025/09/18 2:28 p.m.8 views

CVE-2025-59040 Tuleap backlog item representations do not verify the permissions of the child trackers

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition...

4.3CVSS6.8AI score
SaveExploits0References6
CVE
CVE
added 2025/09/18 2:28 p.m.28 views

CVE-2025-59040

CVE-2025-59040 concerns Tuleap. Backlog item representations do not verify the permissions of child trackers, potentially allowing users to see tracker names they should not access due to unverified sub-tracker privileges. Affected products: Tuleap Community Edition and Tuleap Enterprise Edition....

4.3CVSS6.4AI score0.00332EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/09/18 2:28 p.m.5 views

CVE-2025-59040 Tuleap backlog item representations do not verify the permissions of the child trackers

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition...

4.3CVSS6.3AI score0.00332EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/09/18 12:00 a.m.22 views

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition version 16.11.99.1757427600 and...

4.3CVSS6.5AI score0.00332EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/18 12:00 a.m.10 views

PT-2025-38408

Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.11.99.1757427600 Tuleap Enterprise Edition versions prior to 16.11-6 Tuleap Enterprise Edition version 16.10-8 Description Backlog item representations do not verify the permissions of child...

4.3CVSS6.5AI score0.00332EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/08/31 3:27 p.m.9 views

CVE-2025-54877

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tuleap Enterprise Edition versions before 16.9-8 and before 16.10-5, an attacker can access to the content of the special...

5.3CVSS6.8AI score0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/29 3:07 p.m.5 views

CVE-2025-54877 Tuleap's special and always there fields permissions are not verified in cross-tracker search

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tuleap Enterprise Edition versions before 16.9-8 and before 16.10-5, an attacker can access to the content of the special...

5.3CVSS6.3AI score0.00295EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/08/29 3:07 p.m.19 views

CVE-2025-54877 Tuleap's special and always there fields permissions are not verified in cross-tracker search

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tuleap Enterprise Edition versions before 16.9-8 and before 16.10-5, an attacker can access to the content of the special...

5.3CVSS0.00295EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/29 3:07 p.m.10 views

CVE-2025-54877 Tuleap's special and always there fields permissions are not verified in cross-tracker search

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tuleap Enterprise Edition versions before 16.9-8 and before 16.10-5, an attacker can access to the content of the special...

5.3CVSS6.7AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/08/29 12:00 a.m.16 views

PT-2025-35223

Name of the Vulnerable Software and Affected Versions: Tuleap Community Edition versions prior to 16.10.99.1754050155 Tuleap Enterprise Edition versions prior to 16.9-8 Tuleap Enterprise Edition versions prior to 16.10-5 Description: Tuleap is an Open Source Suite created to facilitate management...

5.3CVSS6.3AI score0.00295EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/08/29 12:00 a.m.15 views

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Enalean Tuleap Community Edition and Enalean Tuleap...

5.3CVSS6.6AI score0.00295EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/07/31 8:03 p.m.11 views

CVE-2025-52899

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed ...

5.3CVSS7.3AI score0.00289EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/31 8:03 p.m.9 views

CVE-2025-53902

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

4.3CVSS6.8AI score0.00309EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/31 8:03 p.m.12 views

CVE-2025-53541

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

5.4CVSS7.5AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/29 8:15 p.m.13 views

CVE-2025-53541

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

5.4CVSS0.0022EPSS
SaveExploits0References4
NVD
NVD
added 2025/07/29 8:15 p.m.13 views

CVE-2025-52899

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed ...

5.3CVSS0.00289EPSS
SaveExploits0References4
NVD
NVD
added 2025/07/29 8:15 p.m.10 views

CVE-2025-53902

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

4.3CVSS0.00309EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/07/29 7:36 p.m.5 views

CVE-2025-53902 Tuleap exposes artifacts to a mentioned user via email notifications

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

4.3CVSS6.2AI score0.00309EPSS
SaveExploits1References4
Rows per page
Query Builder