Enalean vulnerabilities

CVEs per yearBy the year they were published

1. 20218
2. 20228
3. 20238
4. 202410
5. 202527
6. 20261

Newest CVEs

• CVE-2026-24007

  Tuleap is missing CSRF protection in the Overview inconsistent items

  Enalean · tuleap

  Medium4.6
• CVE-2025-65962

  Tuleap has missing CSRF protections its in tracker field dependencies

  Enalean · tuleap

  Medium4.6
• CVE-2025-64760

  Tuleap has missing CSRF protections in its tracker trigger management system

  Enalean · tuleap

  Medium4.6
• CVE-2025-64499

  Tuleap is missing CSRF protections for its planning management API

  Enalean · tuleap

  Medium4.6
• CVE-2025-64498

  Tuleap has a Cross-Site Request Forgery (CSRF) vulnerability

  Enalean · tuleap

  Medium4.6
• CVE-2025-64497

  Tuleap exposes releases for all projects to File Release System project administrators

  Enalean · tuleap

  Medium6.5
• CVE-2025-64482

  Tuleap missing CSRF protections in the File Release System

  Enalean · tuleap

  Medium4.6
• CVE-2025-64117

  Tuleap missing CSRF protection in the management of SVN commit rules and immutable tags

  Enalean · tuleap

  Medium4.6
• CVE-2025-59040

  Tuleap backlog item representations do not verify the permissions of the child trackers

  Enalean · tuleap

  Medium4.3
• CVE-2025-54877

  Tuleap's special and always there fields permissions are not verified in cross-tracker search

  Enalean · tuleap

  Medium5.3