CVE-2025-22129CWE-280

Initial effort field does not respect field permissions in the Taskboard REST card representation in Tuleap

Medium · published February 3, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

Tuleap is an Open Source Suite to improve management of software developments and collaboration. In affected versions an unauthorized user might get access to restricted information. This issue has been addressed in Tuleap Community Edition 16.3.99.1736242932, Tuleap Enterprise Edition 16.2-5, and Tuleap Enterprise Edition 16.3-2. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2025-02-03T21:28Z
EPSS history
Timeline
  • 03 FEB 21:28Z
    Initial effort field does not respect field permissions in the Taskboard REST card representation in Tuleap
    cvelistv5