Medium severity5.3NVD Advisory· Published Feb 3, 2025· Updated Jun 17, 2026
CVE-2025-24029
CVE-2025-24029
Description
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*+ 3 more
- cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*range: <16.3.99.1737562605
- cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:*range: <16.2-7
- (no CPE)range: before 16.3.99.1737562605 (Community Edition), before 16.3-5 (Enterprise Edition), before 16.2-7 (Enterprise Edition)
- (no CPE)range: < 16.3.99.1737562605
Patches
Vulnerability mechanics
References
4- github.com/Enalean/tuleap/security/advisories/GHSA-hq46-63pc-xfv9nvdPatchThird Party Advisory
- tuleap.net/plugins/tracker/nvdIssue TrackingPatchVendor Advisory
- tuleap.net/plugins/git/tuleap/tuleap/stablenvdPermissions Required
- tuleap.net/plugins/git/tuleap/tuleap/stablenvdPermissions Required
News mentions
0No linked articles in our index yet.