Medium severity5.4NVD Advisory· Published Feb 22, 2024· Updated Jun 17, 2026

CVE-2024-25130

Description

Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.99.76 of Tuleap Community Edition and prior to versions 15.5-4 and 15.4-7 of Tuleap Enterprise Edition, users with a read access to a tracker where the mass update feature is used might get access to restricted information. Tuleap Community Edition 15.5.99.76, Tuleap Enterprise Edition 15.5-4, and Tuleap Enterprise Edition 15.4-7 contain a patch for this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enalean/Tuleap3 versions
cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <15.5.99.76
- cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <15.4-7
- (no CPE)range: < 15.5.99.76
Enalean/Tuleap Community Editionllm-fuzzy
Range: <15.5.99.76
Enalean/Tuleap Enterprise Editionllm-fuzzy
Range: <15.5-4, <15.4-7

Patches

Vulnerability mechanics

References

github.com/Enalean/tuleap/commit/57978a32508f5c6d0365419b6eaeb368aee20667nvdPatch
github.com/Enalean/tuleap/security/advisories/GHSA-mq7f-m6mj-hjj5nvdPatchVendor Advisory
tuleap.net/plugins/tracker/nvdVendor Advisory
tuleap.net/plugins/git/tuleap/tuleap/stablenvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000