CNNVD-202508-3563 Information
CNNVD ID
CNNVD-202508-3563
Related CVE
- CNNVD Published: 2025-08-29
Description (Chinese)
Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition都是Enalean开源的一个开源套件，旨在改善软件开发和协作的管理。 Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition存在安全漏洞，该漏洞源于权限绕过，可能导致访问受限字段内容。以下版本受到影响：Tuleap Community Edition 16.10.99.1754050155之前版本和Tuleap Enterprise Edition 16.9-8和16.10-5之前版本。
Description (English)
Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are open-source packages from the Enalean Open Source to improve software development and collaborative management. There is a security loophole in the Enalean Tuleap Community Edition and the Enalean Tuleap Enterprise Edition, which originates from the right circumvention, which may lead to access to restricted fields. The following versions were affected: Tuleap Commission 16.10.9.1754050155 and Tuleap Enterprise 16.9-8 and 16.10-5.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Enalean
Published
2025-08-29
Last Modified
2026-02-24
References
https://tuleap.net/plugins/tracker/?aid=44068 https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=b0c1328f96135ee6a3f84d0847be5f843eafa590 https://github.com/Enalean/tuleap/security/advisories/GHSA-m5qc-c3q5-2p29 https://github.com/Enalean/tuleap/commit/b0c1328f96135ee6a3f84d0847be5f843eafa590 https://access.redhat.com/security/cve/cve-2025-54877 https://nvd.nist.gov/vuln/detail/CVE-2025-54877
Share on: