CVE-2026-24007 | Medium | 4.6 | 2026-02-02 | Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap is missing CSRF protection in the Overview inconsistent items… |
CVE-2025-65962 | Medium | 4.6 | 2025-12-09 | Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.17638037… |
CVE-2025-64760 | Medium | 4.6 | 2025-12-08 | Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.17631269… |
CVE-2025-64499 | Medium | 4.6 | 2025-12-08 | Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon versions prior to 17.0.99.1762456922 a… |
CVE-2025-64498 | Medium | 4.6 | 2025-12-08 | Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versions below 17.0.99.1762444754 and Tuleap… |
CVE-2025-64497 | Medium | 6.5 | 2025-12-08 | Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.1762431347 of Tuleap Community Edition and Tul… |
CVE-2025-64482 | Medium | 4.6 | 2025-11-12 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1762267347… |
CVE-2025-64117 | Medium | 4.6 | 2025-11-12 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap Community Edition prior to version 16.13.99.1761813675… |
CVE-2025-59040 | Medium | 4.3 | 2025-09-18 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of… |
CVE-2025-54877 | Medium | 5.3 | 2025-08-29 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition versions before 16.10.99… |
CVE-2025-53902 | Medium | 4.3 | 2025-07-29 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99… |
CVE-2025-53541 | Medium | 5.4 | 2025-07-29 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99… |
CVE-2025-52899 | Medium | 5.3 | 2025-07-29 | Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99… |
CVE-2025-50179 | Medium | 4.6 | 2025-06-25 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerabili… |
CVE-2025-48991 | Medium | 4.6 | 2025-06-25 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Commun… |
CVE-2025-30209 | Medium | 5.3 | 2025-03-31 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access release notes content or information vi… |
CVE-2025-30203 | Medium | 4.8 | 2025-03-31 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the content of RS… |
CVE-2025-30155 | Medium | 4.3 | 2025-03-31 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce read permissions on parent trackers in… |
CVE-2025-29929 | Medium | 4.6 | 2025-03-31 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy adminis… |
CVE-2025-29766 | Medium | 4.6 | 2025-03-31 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & e… |
CVE-2025-27402 | Medium | 4.6 | 2025-03-04 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protections on tracker fields administr… |
CVE-2025-27401 | Medium | 4.6 | 2025-03-04 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In a standard usages of Tuleap, the issue has a limited impact… |
CVE-2025-27156 | Medium | 4.1 | 2025-03-04 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the… |
CVE-2025-27150 | Medium | 5.3 | 2025-03-04 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. The password to connect the Redis instance is not purged from… |
CVE-2025-27099 | Medium | 4.8 | 2025-03-03 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-site scripting (XSS) via the tracker names… |
CVE-2025-27094 | Medium | 5.4 | 2025-03-03 | Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-res… |
CVE-2025-24029 | Medium | 5.3 | 2025-02-03 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the da… |
CVE-2025-22129 | Medium | 4.3 | 2025-02-03 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to… |
CVE-2024-52599 | Medium | 5.4 | 2024-12-09 | Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 16.1.99.50 and Tu… |
CVE-2024-47767 | Medium | 4.3 | 2024-10-14 | Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.113, Tuleap Enterprise Edition… |
CVE-2024-47766 | Medium | 4.9 | 2024-10-14 | Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.110, Tuleap Enterprise Edition… |
CVE-2024-46988 | Medium | 4.8 | 2024-10-14 | Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.40, Tuleap Enterprise Edition 1… |
CVE-2024-46980 | Medium | 4.8 | 2024-10-14 | Tuleap is a tool for end to end traceability of application and system developments. Prior to Tuleap Community Edition 15.13.99.37, Tuleap Enterprise Edition 1… |
CVE-2024-39902 | Medium | 4.8 | 2024-07-22 | Tuleap is an open source suite to improve management of software developments and collaboration. Prior to Tuleap Community Edition 15.10.99.128 and Tuleap Ente… |
CVE-2024-37167 | Medium | 4.3 | 2024-06-25 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users are able to see backlog items that they should not see… |
CVE-2024-30246 | High | 7.6 | 2024-03-29 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete… |
CVE-2024-25130 | Medium | 5.4 | 2024-02-22 | Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.5.99.76 of Tuleap Community Edition and pr… |
CVE-2024-23344 | Medium | 5.3 | 2024-02-06 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get access to restricted information when a p… |
CVE-2023-48715 | Medium | 5.4 | 2023-12-11 | Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.99.103 of Tuleap Community Edition and p… |
CVE-2023-39521 | Medium | 4.8 | 2023-08-24 | Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and T… |
CVE-2023-38508 | Medium | 6.5 | 2023-08-24 | Tuleap is an open source suite to improve management of software developments and collaboration. In Tuleap Community Edition prior to version 14.11.99.28 and T… |
CVE-2023-35929 | Medium | 5.4 | 2023-07-25 | Tuleap is a free and open source suite to improve management of software development and collaboration. Prior to version 14.10.99.4 of Tuleap Community Edition… |
CVE-2023-35938 | Medium | 4.1 | 2023-06-29 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. When switching from a project visibility that allows re… |
CVE-2023-32072 | Medium | 4.8 | 2023-05-29 | Tuleap is an open source tool for end to end traceability of application and system developments. Tuleap Community Edition prior to version 14.8.99.60 and Tule… |
CVE-2023-30619 | Medium | 5.4 | 2023-05-04 | Tuleap Open ALM is a Libre and Open Source tool for end to end traceability of application and system developments. The title of an artifact is not properly es… |
CVE-2023-23938 | Medium | 5.9 | 2023-04-20 | Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are subject to a cross site scripting atta… |
CVE-2022-46160 | Medium | 4.3 | 2022-12-13 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations… |
CVE-2022-23473 | Medium | 4.3 | 2022-12-13 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not prope… |
CVE-2022-39233 | Medium | 4.3 | 2022-10-19 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions 12.9.99.228 and above, prior to 14.0.99.24… |
CVE-2022-31128 | Medium | 5.4 | 2022-08-01 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not properly verify per… |
CVE-2022-31063 | Medium | 6.5 | 2022-06-29 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.111 the title of a document… |
CVE-2022-31058 | High | 7.2 | 2022-06-29 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.95 Tuleap does not sanitize… |
CVE-2022-31032 | Medium | 4.3 | 2022-06-29 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.58 authorizations are not p… |
CVE-2022-24896 | Medium | 4.3 | 2022-06-09 | Tuleap is a Free & Open Source Suite to manage software developments and collaboration. In versions prior to 13.7.99.239 Tuleap does not properly verify author… |
CVE-2021-43806 | High | 8.8 | 2021-12-15 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize proper… |
CVE-2021-43782 | Medium | 6.7 | 2021-12-15 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. This is a follow up to GHSA-887w-pv2r-x8pm/CVE-2021-… |
CVE-2021-41276 | Medium | 6.7 | 2021-12-15 | Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize proper… |
CVE-2021-41155 | High | 8.8 | 2021-10-18 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions Tuleap does not sanitize properly u… |
CVE-2021-41154 | High | 8.8 | 2021-10-18 | Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In affected versions an attacker with read access to a "… |
CVE-2021-41148 | High | 8.8 | 2021-10-15 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prior to version 11.16.99.173 of Community… |
CVE-2021-41147 | High | 7.2 | 2021-10-15 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prior to version 11.16.99.173 of Community… |
CVE-2021-41142 | Medium | 5.4 | 2021-10-14 | Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. There is a cross-site scripting vulnerabili… |
CVE-2018-17298 | Critical | 9.8 | 2018-09-21 | An issue was discovered in Enalean Tuleap before 10.5. Reset password links are not invalidated after a user changes its password. |
CVE-2018-7538 | Critical | 9.8 | 2018-03-12 | A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQ… |
CVE-2018-7634 | High | 8.8 | 2018-03-01 | An issue was discovered in Enalean Tuleap 9.17. Lack of CSRF attack mitigation while changing an e-mail address makes it possible to abuse the functionality by… |
CVE-2017-7411 | High | 8.8 | 2017-10-30 | An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentElements() method is using the unserializ… |
CVE-2017-7981 | High | 8.8 | 2017-04-29 | Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project Wiki component because the proc_open PHP… |
CVE-2014-8791 | | | 2014-12-02 | project/register.php in Tuleap before 7.7, when sys_create_project_in_one_step is disabled, allows remote authenticated users to conduct PHP object injection a… |
CVE-2014-7178 | | | 2014-11-28 | Enalean Tuleap before 7.5.99.6 allows remote attackers to execute arbitrary commands via the User-Agent header, which is provided to the passthru PHP function. |
CVE-2014-7176 | | | 2014-11-04 | SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobal_txt parameter t… |
CVE-2014-7177 | | | 2014-10-31 | XML External Entity vulnerability in Enalean Tuleap 7.2 and earlier allows remote authenticated users to read arbitrary files via a crafted xml document in a c… |