CVE-2025-53902

published 2025-07-29

CVE-2025-53902: Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version…

Priority P4 22 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts that they are not authorized to view. This is fixed in Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
enalean	tuleap	< 16.8-6	16.8-6
enalean	tuleap	< 16.9.99.1752585665	16.9.99.1752585665
enalean	tuleap	—	—
enalean	tuleap	—	—
enalean	tuleap	—	—
enalean	tuleap	>= 16.9 < 16.9-5	16.9-5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-863