medium4.6
CVE-2025-48991
Tuleap is an Open Source Suite to improve management of software developments and collaboration.
Impact
Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Community Edition prior to version 16.8.99.1748845907 and Tuleap Enterprise Edition prior to versions 16.8-3 and 16.7-5 to trick victims into changing the canned responses. Tuleap Community Edition 16.8.99.1748845907, Tuleap Enterprise Edition 16.8-3, and Tuleap Enterprise Edition 16.7-5 contain a fix for the vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enalean | Tuleap | before 16.7-5 before 16.8.99.1748845907 from 16.8 before 16.8-3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Enalean/tuleap/commit/cbf9b2a38e33dfd755dc2ccf074126b598a78274
- https://github.com/Enalean/tuleap/security/advisories/GHSA-px9r-875r-w534
- https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=cbf9b2a38e33dfd755dc2ccf074126b598a78274
- https://tuleap.net/plugins/tracker/?aid=43326