CVE-2025-27094
Tuleap Tracker Field Configuration Manipulation Vulnerability
Description
Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute for the multiselectbox field, the default value, number of rows, and columns attributes for the text field, and the default value, size, and max characters attributes for the string field configurations are lost when added as criteria in a saved report. Additionally, in Tuleap Community Edition versions 16.4.99.1739806825 to 16.4.99.1739877910, this issue could be exploited to prevent access to tracker data by triggering a crash. This vulnerability has been fixed in Tuleap Community Edition 16.4.99.1739877910 and Tuleap Enterprise Edition 16.3-9 and 16.4-4.
INFO
Published Date :
March 3, 2025, 4:15 p.m.
Last Modified :
July 10, 2025, 4:59 p.m.
Source :
[email protected]
Remotely Exploitable :
Yes !
Impact Score :
2.5
Exploitability Score :
2.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-27094.
| URL | Resource |
|---|---|
| https://github.com/Enalean/tuleap/commit/ef650abb4a28359a3228d6e1102a742f7c013150 | Patch |
| https://github.com/Enalean/tuleap/security/advisories/GHSA-r85g-9wjx-pw7f | Patch Vendor Advisory |
| https://tuleap.net/plugins/tracker/?aid=41849 | Issue Tracking Vendor Advisory |
| https://tuleap.net/plugins/tracker/?aid=41849 | Issue Tracking Vendor Advisory |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-27094 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-27094 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jul. 10, 2025
Action Type Old Value New Value Added CPE Configuration OR *cpe:2.3:a:enalean:tuleap:*:*:*:*:community:*:*:* versions up to (excluding) 16.4.99.1739877910 *cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:* versions up to (excluding) 16.3-9 *cpe:2.3:a:enalean:tuleap:*:*:*:*:enterprise:*:*:* versions from (including) 16.4 up to (excluding) 16.4-4 Added Reference Type GitHub, Inc.: https://github.com/Enalean/tuleap/commit/ef650abb4a28359a3228d6e1102a742f7c013150 Types: Patch Added Reference Type GitHub, Inc.: https://github.com/Enalean/tuleap/security/advisories/GHSA-r85g-9wjx-pw7f Types: Patch, Vendor Advisory Added Reference Type CISA-ADP: https://tuleap.net/plugins/tracker/?aid=41849 Types: Issue Tracking, Vendor Advisory Added Reference Type GitHub, Inc.: https://tuleap.net/plugins/tracker/?aid=41849 Types: Issue Tracking, Vendor Advisory -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Mar. 03, 2025
Action Type Old Value New Value Added Reference https://tuleap.net/plugins/tracker/?aid=41849 -
New CVE Received by [email protected]
Mar. 03, 2025
Action Type Old Value New Value Added Description Tuleap is an open-source suite designed to improve software development management and collaboration. A malicious user with access to a tracker could force-reset certain field configurations, leading to potential information loss. The display time attribute for the date field, the size attribute for the multiselectbox field, the default value, number of rows, and columns attributes for the text field, and the default value, size, and max characters attributes for the string field configurations are lost when added as criteria in a saved report. Additionally, in Tuleap Community Edition versions 16.4.99.1739806825 to 16.4.99.1739877910, this issue could be exploited to prevent access to tracker data by triggering a crash. This vulnerability has been fixed in Tuleap Community Edition 16.4.99.1739877910 and Tuleap Enterprise Edition 16.3-9 and 16.4-4. Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Added CWE CWE-440 Added Reference https://github.com/Enalean/tuleap/commit/ef650abb4a28359a3228d6e1102a742f7c013150 Added Reference https://github.com/Enalean/tuleap/security/advisories/GHSA-r85g-9wjx-pw7f Added Reference https://tuleap.net/plugins/tracker/?aid=41849
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-27094 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-27094
weaknesses.