Joris Masson

3 exploits Active since Mar 2025
CVE-2025-29929 WRITEUP MEDIUM WRITEUP
Tuleap < 16.4-8 and < 16.5.99.1742306712 - Cross-Site Request Forgery in Tracker Hierarchy Administration
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742306712 and Tuleap Enterprise Edition 16.5-5 and 16.4-8.
CVSS 4.6
CVE-2025-30155 WRITEUP MEDIUM WRITEUP
Tuleap < 16.4-8 and < 16.5.99.1742392651 - Incorrect Authorization in REST API
Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in the REST API. This vulnerability is fixed in Tuleap Community Edition 16.5.99.1742392651 and Tuleap Enterprise Edition 16.5-5 and 16.4-8.
CVSS 4.3
CVE-2026-24007 WRITEUP MEDIUM WRITEUP
Tuleap < 17.0-9 - Cross-Site Request Forgery in Overview Inconsistent Items
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims into repairing inconsistent items (creating artifact links from the release). This vulnerability is fixed in Tuleap Community Edition 17.0.99.1768924735 and Tuleap Enterprise Edition 17.2-5, 17.1-6, and 17.0-9.
CVSS 4.6