Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 11:32 p.m.4 views

CVE-2025-64499

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...

5.4CVSS6.7AI score0.00118EPSS
Exploits0References1
NVD
NVD
added 2025/12/08 11:15 p.m.3 views

CVE-2025-64499

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...

5.4CVSS0.00118EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/12/08 10:44 p.m.19 views

CVE-2025-64499 Tuleap is missing CSRF protections for its planning management API

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...

4.6CVSS0.00118EPSS
Exploits0References4
CVE
CVE
added 2025/12/08 10:44 p.m.8 views

CVE-2025-64499

The CVE-2025-64499 entry concerns Tuleap: Community Edition versions prior to 17.0.99.1762456922 and Enterprise Edition versions prior to 17.0-2, 16.13-7, and 16.12-10 are vulnerable to CSRF in the Planning Management API, allowing attackers to create, edit, or remove plans. The root cause is CSR...

5.4CVSS6.4AI score0.00118EPSS
Exploits0References4Affected Software1
EUVD
EUVD
added 2025/12/08 10:44 p.m.3 views

EUVD-2025-201837

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...

4.6CVSS6.2AI score0.00118EPSS
Exploits0References4
OSV
OSV
added 2025/12/08 10:44 p.m.3 views

CVE-2025-64499 Tuleap is missing CSRF protections for its planning management API

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...

4.6CVSS6.7AI score0.00118EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.3 views

Enalean Tuleap 跨站请求伪造漏洞

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. A cross-site request forgery vulnerability exists in Enalean Tuleap, which stems from the lack of CSRF protection in the Planning Management...

5.4CVSS6.5AI score0.00118EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49607

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API...

4.6CVSS6.8AI score0.00118EPSS
Exploits0References5
CNVD
CNVD
added 2021/07/21 12:0 a.m.18 views

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-54731)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite. A...

4.3CVSS2.2AI score0.0086EPSS
Exploits0References1
Rows per page
Query Builder