CVE-2025-52899

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-52899

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-52899.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-52899

Aliases

GHSA-xqf3-xxxf-x3c2

Published

2025-07-29T19:16:35.977Z

Modified

2026-04-10T05:31:19.846087Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Tuleap vulnerable to user enumeration via the lost password form

Details

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1750843170 and Tuleap Enterprise Edition prior to 16.8-4 and 16.9-2, the forgot password form allows for user enumeration. This is fixed in Tuleap Community Edition version 16.9.99.1750843170 and Tuleap Enterprise Edition 16.8-4 and 16.9-2.

Database specific

{
    "cwe_ids": [
        "CWE-204"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52899.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/enalean/tuleap

Affected ranges

Type: GIT
Repo: https://github.com/enalean/tuleap
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

5c72d6d253016d38ed472eb7918f772d074ddb07

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-52899.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "16.8-4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "16.9.99.1750843170"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "16.9"
            },
            {
                "fixed": "16.9-2"
            }
        ]
    }
]