CVE-2025-65962

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-65962

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65962.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-65962

Aliases

GHSA-9hgc-cm68-rrgc

Published

2025-12-08T23:15:02.980Z

Modified

2026-04-10T05:34:40.359394Z

Severity

4.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L CVSS Calculator

Summary

Tuleap has missing CSRF protections its in tracker field dependencies

Details

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Community Edition prior to 17.0.99.1763803709 and Tuleap Enterprise Edition versions prior to 17.0-4 and 16.13-9 are mission CSRF protections in its tracker field dependencies, allowing attackers to modify tracker fields. This issue is fixed in Tuleap Community Edition version 17.0.99.1763803709 and Tuleap Enterprise Edition versions 17.0-4 and 16.13-9.

Database specific

{
    "cwe_ids": [
        "CWE-352"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65962.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/enalean/tuleap

Affected ranges

Type: GIT
Repo: https://github.com/enalean/tuleap
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

26678c5b411042e68964b199bf88a44607550633

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65962.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "16.13-9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "17.0.99.1763803709"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "17.0"
            },
            {
                "fixed": "17.0-4"
            }
        ]
    }
]