CVE-2025-53902

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-53902
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53902.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-53902
Aliases
  • GHSA-6f24-5v47-rj6j
Published
2025-07-29T19:36:10.910Z
Modified
2026-04-10T05:31:19.866534Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Tuleap exposes artifacts to a mentioned user via email notifications
Details

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts that they are not authorized to view. This is fixed in Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5.

Database specific 
{
    "cwe_ids": [
        "CWE-863"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53902.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/enalean/tuleap

Affected ranges

Type
GIT
Repo
https://github.com/enalean/tuleap
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ebe054df8a2672afee41af84e5ba14b57ef8b789

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53902.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "16.8-6"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "16.9.99.1752585665"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "16.9"
            },
            {
                "fixed": "16.9-5"
            }
        ]
    }
]