CVE-2024-25130

Summary

CVE-2024-25130 is a vulnerability affecting Tuleap, an open source software development and collaboration suite. Prior to version 15.5.99.76 of the Community Edition and versions 15.5-4 and 15.4-7 of the Enterprise Edition, users with read access to a tracker could potentially gain unauthorized access to restricted information due to a misconfiguration in the mass update feature. This issue has been addressed with patches in the mentioned versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.