CVE-2025-50179

Published Jun 25, 2025

Last updated 22 days ago

CVSS medium 4.6

Overview

Description
Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Edition prior to version 16.9-1 to trick victims into changing the canned responses. Tuleap Community Edition 16.8.99.1749830289 and Tuleap Enterprise Edition 16.9-1 contain a patch for the issue.
Source
security-advisories@github.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.6
Impact score
2.5
Exploitability score
2.1
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
Severity
MEDIUM

Weaknesses

security-advisories@github.com
CWE-352

Social media

Hype score
Not currently trending

  1. CVE-2025-50179 Cross-Site Request Forgery in Tuleap Community and Enterprise Editions https://t.co/oZ06xp8OxK Vulnerability Notification: https://t.co/xhLrNnfyrO

    @VulmonFeeds

    25 Jun 2025

    7 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.