PatchTheCVECVE-2025-50179: Tuleap is an Open Source Suite to improve management of software developments and collaboration
CVE-2025-50179 is a medium-severity flaw (CVSS 4.6) affecting tuleap. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Edition prior to version 16.9-1 to trick victims into changing the canned responses. Tuleap Community Edition 16.8.99.1749830289 and Tuleap Enterprise Edition 16.9-1 contain a patch for the issue.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 4.6 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 93%) |
| CISA exploited list | No |
| Weakness | CWE-352 |
| Published | 2025-06-25 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-50179?
tuleap: upgrade to 16.8.99.1749830289, 16.9-1. Exact commands for each OS are on this page.
Is CVE-2025-50179 being exploited?
CVE-2025-50179 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-50179 affect?
CVE-2025-50179 affects tuleap. Severity is medium (CVSS 4.6). Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Ent
How urgent is CVE-2025-50179?
Priority 18/100. No elevated risk signals yet.
Related CVEs
- CVE-2025-54877 MEDIUM 5.3 UPGRADE Tuleap is an Open Source Suite created to facilitate management of software development and collaboration
- CVE-2025-64497 MEDIUM 6.5 UPGRADE Tuleap is an Open Source Suite for management of software development and collaboration
- CVE-2025-65962 MEDIUM 4.6 UPGRADE Tuleap is a free and open source suite for management of software development and collaboration
- CVE-2025-64498 MEDIUM 4.6 UPGRADE Tuleap is an Open Source Suite for management of software development and collaboration
- CVE-2025-64499 MEDIUM 4.6 UPGRADE Tuleap is a free and open source suite for management of software development and collaboration