Data Manipulation Vulnerability in Tuleap by Enalean

CVE-2025-27401

What is CVE-2025-27401?

A data manipulation vulnerability in Tuleap allows authorized users to create and delete reports repeatedly. This action can lead to the unintended deletion of critical filters across instances, forcing users and tracker administrators to restore them manually. While this issue typically results in limited impact, it can disrupt workflow and data management in environments where users rely on specific criteria filters for tracking and reporting.

References