VULNERABILITY INTELLIGENCE

CVE-2025-22129

CVSS score4.3 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2025-02-03

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted information. This issue has been addressed in Tuleap Community Edition 16.3.99.1736242932, Tuleap Enterprise Edition 16.2-5, and Tuleap Enterprise Edition 16.3-2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Weakness classification

security-advisories@github.com: CWE-280

Primary references

security-advisories@github.com — Patch, Third Party Advisory
security-advisories@github.com — Permissions Required
security-advisories@github.com — Exploit, Issue Tracking, Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Patch, Vendor Advisory