CVE-2025-24029: Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the…

PriorityP428medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

EPSS

0.32%

24.2th percentile

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
enalean	tuleap	< 16.2-7	16.2-7
enalean	tuleap	< 16.3.99.1737562605	16.3.99.1737562605
enalean	tuleap	>= 16.3 < 16.3-5	16.3-5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.