CVE-2025-53902
MEDIUMTuleap <16.9.99.1752585665, <16.8-6, <16.9-5 - Info Disclosure
Title source: llmDescription
Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts that they are not authorized to view. This is fixed in Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5.
References (4)
Core 4
Core References
Third Party Advisory x_refsource_confirm
https://github.com/Enalean/tuleap/security/advisories/GHSA-6f24-5v47-rj6j
Patch x_refsource_misc
https://github.com/Enalean/tuleap/commit/ebe054df8a2672afee41af84e5ba14b57ef8b789
Permissions Required x_refsource_misc
https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ebe054df8a2672afee41af84e5ba14b57ef8b789
Exploit, Vendor Advisory x_refsource_misc
https://tuleap.net/plugins/tracker/?aid=43704
Scores
CVSS v3
4.3
EPSS
0.0008
EPSS Percentile
22.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-863
Status
published
Products (2)
enalean/tuleap
< 16.8-6
enalean/tuleap
< 16.9.99.1752585665
Published
Jul 29, 2025
Tracked Since
Feb 18, 2026