CVE-2025-52899

published 2025-07-29

CVE-2025-52899: Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version…

Priority P4 30 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C L I N A N

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed in Tuleap Community Edition version 16.9.99.1750843170 and Tuleap Enterprise Edition 16.8-4 and 16.9-2.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
enalean	tuleap	< 16.8-4	16.8-4
enalean	tuleap	< 16.9.99.1750843170	16.9.99.1750843170
enalean	tuleap	—	—
enalean	tuleap	—	—
enalean	tuleap	—	—
enalean	tuleap	>= 16.9 < 16.9-2	16.9-2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-204