CSRF Vulnerability in Tuleap Open Source Suite

CVE-2025-29766

What is CVE-2025-29766?

Tuleap, an Open Source Suite designed to enhance software development and collaboration, has a vulnerability due to inadequate CSRF protections on artifact submission and editing functionalities. This flaw allows an attacker to potentially manipulate users into inadvertently submitting or altering artifacts or comments, thereby compromising the integrity of project data. The issue has been addressed in updates for both the Community and Enterprise Editions of Tuleap, which include necessary security enhancements.

References