← Database

CVE-2025-24029

MEDIUM CVSS: 5.3 Published: 2025-02-03 Modified: 2026-06-17

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected Platforms

Enalean Tuleap

Weakness Type

CWE-280

References