CVE-2025-64482 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Tuleap Community Edition prior to version 16.13.99.1762267347 and Tuleap Enterprise Edition prior to versions 17.01-, 16.13-6, and 16.12-9. This medium-severity vulnerability (CVSS 4.6) allows an attacker to trick authenticated users into inadvertently changing SVN repository commit rules or immutable tags. While the attack complexity is low, it requires user interaction and successful exploitation could lead to unauthorized modifications of repository settings. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Enalean | Tuleap | Tuleap Community Edition < 16.13.99.1762267347, Tuleap Enterprise Edition < 16.12-9, Tuleap Enterprise Edition < 16.13-6, Tuleap Enterprise Edition < 17.0-1CNA affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.