PT-2025-9690 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.4.99.1740414959 Tuleap Enterprise Edition versions prior to 16.4-6 and 16.3-11 Description: The issue is related to the lack of CSRF protections on tracker fields administrative operations in Tuleap. This allows an...

CVE-2025-27402: Cross-Site Request Forgery (CSRF)

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An attacker could use this vulnerability to trick victims into removing or updating tracker fields. This vulnerability i...

Tuleap Cross-Site Request Forgery Vulnerability

Tuleap is an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A cross-site request forgery vulnerability exists in Tuleap Community Edition prior to 16.4.99.1740414959 and Tuleap Enterprise Edition prior to 16.4-6, and prior ...