Security Advisory

CVE-2025-27156

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-04 16:53:49

Last updated 2025-03-04 17:22:15

Assigner GitHub_M

State PUBLISHED

Description

Tuleap is an Open Source Suite to improve management of software developments and collaboration. The mass emailing features do not sanitize the content of the HTML emails. A malicious user could use this issue to facilitate a phishing attempt or to indirectly exploit issues in the recipients mail clients. This vulnerability is fixed in Tuleap Community Edition 16.4.99.1740567344 and Tuleap Enterprise Edition 16.4-6 and 16.3-11.

← Browse all CVEs View on cve.org ↗