medium4.6
CVE-2025-50179
Tuleap is an Open Source Suite to improve management of software developments and collaboration.
Impact
Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Edition prior to version 16.9-1 to trick victims into changing the canned responses. Tuleap Community Edition 16.8.99.1749830289 and Tuleap Enterprise Edition 16.9-1 contain a patch for the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enalean | Tuleap | before 16.8.99.1749830289 before 16.9-1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/Enalean/tuleap/commit/0f9aab6e3640e892c74c9dfc90ad65fd3aff499e
- https://github.com/Enalean/tuleap/security/advisories/GHSA-rxpm-g7gw-4mrv
- https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=0f9aab6e3640e892c74c9dfc90ad65fd3aff499e
- https://tuleap.net/plugins/tracker/?aid=43357