PT-2025-4366

CVE-2025-22129

·

Published

2025-02-03

·

Updated

2025-02-04

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Tuleap Community Edition versions prior to 16.3.99.1736242932 Tuleap Enterprise Edition versions prior to 16.2-5 Tuleap Enterprise Edition versions prior to 16.3-2
Description An unauthorized user might get access to restricted information in affected versions of Tuleap.
Recommendations For Tuleap Community Edition versions prior to 16.3.99.1736242932, upgrade to version 16.3.99.1736242932. For Tuleap Enterprise Edition versions prior to 16.2-5, upgrade to version 16.2-5. For Tuleap Enterprise Edition versions prior to 16.3-2, upgrade to version 16.3-2.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-280: Improper Handling of Insufficient Permissions or Privileges
Related identifiers
CVE-2025-22129
GHSA-F34G-WC2M-MF76
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com