Medium severity4.3NVD Advisory· Published Feb 3, 2025· Updated Jun 17, 2026

CVE-2025-22129

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted information. This issue has been addressed in Tuleap Community Edition 16.3.99.1736242932, Tuleap Enterprise Edition 16.2-5, and Tuleap Enterprise Edition 16.3-2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Enalean/Tuleap3 versions
cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 2 more
- cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <16.3.99.1736242932
- cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <16.2-5
- (no CPE)range: < 16.3.99.1736242932
Tuleap/Tuleapllm-fuzzy
Range: before 16.3.99.1736242932 (Community Edition), before 16.2-5 (Enterprise Edition), before 16.3-2 (Enterprise Edition)

Patches

Vulnerability mechanics

References

github.com/Enalean/tuleap/security/advisories/GHSA-f34g-wc2m-mf76nvdPatchThird Party Advisory
tuleap.net/plugins/tracker/nvdExploitIssue TrackingPatchVendor Advisory
tuleap.net/plugins/git/tuleap/tuleap/stablenvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000