CVE-2025-53902

Katalog CVE

CVSS 4.3 · Medium EPSS 0,32%

Kerentanan Incorrect Authorization pada enalean tuleap. Skor CVSS 3.1 4.3 (Medium) menurut github.com.

Deskripsi (NVD)

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts that they are not authorized to view. This is fixed in Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5.

Rincian

Terbit di NVD

29 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://tuleap.net/plugins/tracker/?aid=43704 exploit · advisory vendor
• https://github.com/Enalean/tuleap/commit/ebe054df8a2672afee41af84e5ba14b57ef8b789 patch
• https://github.com/Enalean/tuleap/security/advisories/GHSA-6f24-5v47-rj6j advisory pihak ketiga
• https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=ebe054df8a2672afee41af84e5ba14b57ef8b789 permissions required