https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:38:44.698254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-24029 CVE-2025-24029 — Artifact permissions are not verified in the Cross Tracker Search widget in Tuleap 2026-10-07T00:38:44.700097+00:00

Affected: Enalean tuleap

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Users (possibly anonymous ones if the widget is used in the dashboard of a public project) might get access to artifacts they should not see. This issue has been addressed in Tuleap Community Edition 16.3.99.1737562605 as well as Tuleap Enterprise Edition 16.3-5 and Tuleap Enterprise Edition 16.2-7. Users are advised to upgrade. There are no known workarounds for this vulnerability.