Approved changes feed: RSS · Atom
cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:*
part: a version: * update: *
| Vendor | Enalean (a166e15a-856e-5e28-a167-52a4feec8e81) |
|---|---|
| Product | Tuleap (958a7ce4-224d-5670-ad03-a2d0f7809731) |
| Edition | * |
| Language | * |
| Software edition | community |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/enalean/tuleap |
purl2cpe | 2026-06-01 10:13:11.895735 |
pkg:sourceforge/tuleap |
purl2cpe | 2026-06-01 10:13:11.895738 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24007 |
vulnerable | 2026-06-08 07:51:16.520745 |
Tuleap is missing CSRF protection in the Overview inconsistent items
MEDIUM (4.6)
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items. An attacker could use this vulnerability to trick victims into repairing inconsistent items (creating artifact links from the release). This vulnerability is fixed in Tuleap Community Edition 17.0.99.1768924735 and Tuleap Enterprise Edition 17.2-5, 17.1-6, and 17.0-9.
Published: 2026-02-02T19:52:51.336Z
Updated: 2026-02-03T14:56:49.087Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-65962 |
vulnerable | 2026-06-08 07:39:21.102642 |
Tuleap has missing CSRF protections its in tracker field dependencies
MEDIUM (4.6)
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterprise Edition versions prior to 17.0-4 and 16.13-9 are mission CSRF protections in its tracker field dependencies, allowing attackers to modify tracker fields. This issue is fixed in Tuleap Community Edition version 17.0.99.1763803709 and Tuleap Enterprise Edition versions 17.0-4 and 16.13-9.
Published: 2025-12-08T23:15:02.980Z
Updated: 2025-12-09T16:04:21.648Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64760 |
vulnerable | 2026-06-08 07:39:20.259914 |
Tuleap has missing CSRF protections in its tracker trigger management system
MEDIUM (4.6)
Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763126988 and Tuleap Enterprise Edition prior to 17.0-3 and 16.13-8 have missing CSRF protections which allow attackers to create or remove tracker triggers. This issue is fixed in Tuleap Community Edition version 17.0.99.1763126988 and Tuleap Enterprise Edition versions 17.0-3 and 16.13-8.
Published: 2025-12-08T23:08:22.218Z
Updated: 2025-12-09T16:04:28.307Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64499 |
vulnerable | 2026-06-08 07:39:19.850555 |
Tuleap is missing CSRF protections for its planning management API
MEDIUM (4.6)
Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 are vulnerable to CSRF attacks through planning management API. Attackers have access to create, edit or remove plans. This issue is fixed in Tuleap Community Edition version 17.0.99.1762456922 and Tuleap Enterprise Edtion versions 17.0-2, 16.13-7 and 16.12-10.
Published: 2025-12-08T22:44:29.555Z
Updated: 2025-12-09T16:04:34.393Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64498 |
vulnerable | 2026-06-08 07:39:19.849999 |
Tuleap has a Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (4.6)
Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap Enterprise Edition versions prior to 17.0-2, 16.13-7 and 16.12-10 allow attackers trick victims into changing tracker general settings. This issue is fixed in version Tuleap Community Edition version 17.0.99.1762444754 and Tuleap Enterprise Edition versions 17.0-2, 16.13-7 and 16.12-10.
Published: 2025-12-08T22:36:26.283Z
Updated: 2025-12-09T16:04:42.860Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64497 |
vulnerable | 2026-06-08 07:39:19.849401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-54877 |
vulnerable | 2026-06-08 07:33:13.518632 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53902 |
vulnerable | 2026-06-08 07:31:15.923509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-53541 |
vulnerable | 2026-06-08 07:31:14.693208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52899 |
vulnerable | 2026-06-08 07:31:13.155965 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-50179 |
vulnerable | 2026-06-08 07:31:10.844476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48991 |
vulnerable | 2026-06-08 07:29:12.427881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30209 |
vulnerable | 2026-06-08 07:16:59.295974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30203 |
vulnerable | 2026-06-08 07:16:59.286961 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30155 |
vulnerable | 2026-06-08 07:16:59.143686 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29929 |
vulnerable | 2026-06-08 07:14:56.958311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-29766 |
vulnerable | 2026-06-08 07:14:56.561243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27402 |
vulnerable | 2026-06-08 07:14:54.888799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27401 |
vulnerable | 2026-06-08 07:14:54.885568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27156 |
vulnerable | 2026-06-08 07:14:54.235953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27150 |
vulnerable | 2026-06-08 07:14:54.226868 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27099 |
vulnerable | 2026-06-08 07:14:54.150256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27094 |
vulnerable | 2026-06-08 07:14:54.139644 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24029 |
vulnerable | 2026-06-08 07:12:47.651325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22129 |
vulnerable | 2026-06-08 07:10:52.242118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-52599 |
vulnerable | 2026-06-08 06:52:16.146412 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47767 |
vulnerable | 2026-06-08 06:48:13.132615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47766 |
vulnerable | 2026-06-08 06:48:13.132006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46988 |
vulnerable | 2026-06-08 06:48:10.959578 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46980 |
vulnerable | 2026-06-08 06:48:10.940035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39902 |
vulnerable | 2026-06-08 06:41:51.806206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37167 |
vulnerable | 2026-06-08 06:39:46.745500 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30246 |
vulnerable | 2026-06-08 06:35:29.320576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25130 |
vulnerable | 2026-06-08 06:31:22.222713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23344 |
vulnerable | 2026-06-08 06:29:37.330802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-48715 |
vulnerable | 2026-06-08 06:14:27.942335 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39521 |
vulnerable | 2026-06-08 06:09:37.647571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38508 |
vulnerable | 2026-06-08 06:08:18.128978 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35938 |
vulnerable | 2026-06-08 06:06:28.189786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-35929 |
vulnerable | 2026-06-08 06:06:28.171229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32072 |
vulnerable | 2026-06-08 06:04:44.877951 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30619 |
vulnerable | 2026-06-08 06:04:39.967833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23938 |
vulnerable | 2026-06-08 05:56:04.867585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46160 |
vulnerable | 2026-06-08 05:50:38.270682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39233 |
vulnerable | 2026-06-08 05:47:18.398892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31128 |
vulnerable | 2026-06-08 05:43:40.250549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31063 |
vulnerable | 2026-06-08 05:43:40.087899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31058 |
vulnerable | 2026-06-08 05:43:40.080722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31032 |
vulnerable | 2026-06-08 05:43:40.022208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24896 |
vulnerable | 2026-06-08 05:41:44.853755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23473 |
vulnerable | 2026-06-08 05:40:57.603497 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43806 |
vulnerable | 2026-06-08 05:36:44.323816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43782 |
vulnerable | 2026-06-08 05:36:44.249535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41276 |
vulnerable | 2026-06-08 05:35:20.096520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41155 |
vulnerable | 2026-06-08 05:35:19.844343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41154 |
vulnerable | 2026-06-08 05:35:19.843889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41148 |
vulnerable | 2026-06-08 05:35:19.834087 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41147 |
vulnerable | 2026-06-08 05:35:19.833524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41142 |
vulnerable | 2026-06-08 05:35:19.826929 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.