Skip to main content

Vendor/product archive

enalean / tuleap CVEs

Beta · best-effort

68 CVEs tagged to enalean / tuleap3 Critical, 10 High, 55 Medium, 0 Low, 0 Unrated.

CVE-2026-24007

Published Feb 2, 2026

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could us…

CVSS 4.6 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-65962

Published Dec 9, 2025

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterp…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-64760

Published Dec 8, 2025

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763126988 and Tuleap Enterp…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-64499

Published Dec 8, 2025

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-64498

Published Dec 8, 2025

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition v…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-64497

Published Dec 8, 2025

Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tuleap Enterprise Editi…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-54877

Published Aug 29, 2025

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99.1754050155 and Tule…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-53902

Published Jul 29, 2025

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tule…

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-53541

Published Jul 29, 2025

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tule…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-52899

Published Jul 29, 2025

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tule…

CVSS 5.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-50179

Published Jun 25, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Communi…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-48991

Published Jun 25, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Community Edition prior to…

CVSS 4.6 · Medium
Vendor/product tagsBeta · best-effort

CVE-2025-30209

Published Mar 31, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information via the FRS REST endpo…

CVSS 5.3 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-30203

Published Mar 31, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the content of RSS feeds in the RSS w…

CVSS 4.8 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-30155

Published Mar 31, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This…

CVSS 4.3 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-29929

Published Mar 31, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker…

CVSS 4.6 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-29766

Published Mar 31, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the trac…

CVSS 4.6 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-27402

Published Mar 4, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administrative operations. An…

CVSS 4.6 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-27401

Published Mar 4, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact, it will mostly lea…

CVSS 4.6 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-27156

Published Mar 4, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malic…

CVSS 4.1 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-27150

Published Mar 4, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect the Redis instance is not purged from the archive generate…

CVSS 5.3 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-27099

Published Mar 3, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the tracker names used in the semanti…

CVSS 4.8 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-27094

Published Mar 3, 2025

Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field con…

CVSS 5.4 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort

CVE-2025-24029

Published Feb 3, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public…

CVSS 5.3 · Medium
evidence mentions
4
Buzz score
22.6
Vendor/product tagsBeta · best-effort

CVE-2025-22129

Published Feb 3, 2025

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted informati…

CVSS 4.3 · Medium
evidence mentions
3
Buzz score
20.4
Vendor/product tagsBeta · best-effort
Showing 1-25 of 68 CVEsPage 1 of 3