CVE Daily – Redmine (High+Critical) https://cvedaily.com/pages/tags/redmine.html CVE Daily – Redmine (High+Critical) en Wed, 03 Jun 2026 21:27:06 +0000 [High] CVE-2024-36267 – Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1... https://nvd.nist.gov/vuln/detail/CVE-2024-36267 https://nvd.nist.gov/vuln/detail/CVE-2024-36267 Thu, 30 May 2024 06:15:09 +0000 High CVE-2024-36267

Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server (within the privilege of the Redmine process).

CVSS: 8.1 · CWE: CWE-22

View on NVD

]]> [Critical] CVE-2023-31541 – A unrestricted file upload vulnerability was discovered in the ‘Browse and uploa... https://nvd.nist.gov/vuln/detail/CVE-2023-31541 https://nvd.nist.gov/vuln/detail/CVE-2023-31541 Tue, 13 Jun 2023 17:15:14 +0000 Critical CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

CVSS: 9.8 · CWE: CWE-434

View on NVD

]]> [High] CVE-2022-44030 – Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or ... https://nvd.nist.gov/vuln/detail/CVE-2022-44030 https://nvd.nist.gov/vuln/detail/CVE-2022-44030 Tue, 06 Dec 2022 23:15:10 +0000 High CVE-2022-44030

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

CVSS: 7.5 · CWE: CWE-755

View on NVD

]]> [High] CVE-2021-37156 – Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling t... https://nvd.nist.gov/vuln/detail/CVE-2021-37156 https://nvd.nist.gov/vuln/detail/CVE-2021-37156 Thu, 05 Aug 2021 21:15:12 +0000 High CVE-2021-37156

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated.

CVSS: 7.5 · CWE: CWE-613

View on NVD

]]> [High] CVE-2021-31863 – Insufficient input validation in the Git repository integration of Redmine befor... https://nvd.nist.gov/vuln/detail/CVE-2021-31863 https://nvd.nist.gov/vuln/detail/CVE-2021-31863 Wed, 28 Apr 2021 07:15:07 +0000 High CVE-2021-31863

Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows Redmine users to read arbitrary local files accessible by the application server process.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-30164 – Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_i... https://nvd.nist.gov/vuln/detail/CVE-2021-30164 https://nvd.nist.gov/vuln/detail/CVE-2021-30164 Tue, 06 Apr 2021 08:15:12 +0000 Critical CVE-2021-30164

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-30163 – Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the nam... https://nvd.nist.gov/vuln/detail/CVE-2021-30163 https://nvd.nist.gov/vuln/detail/CVE-2021-30163 Tue, 06 Apr 2021 08:15:12 +0000 High CVE-2021-30163

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to project_id values.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2017-18026 – Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block ... https://nvd.nist.gov/vuln/detail/CVE-2017-18026 https://nvd.nist.gov/vuln/detail/CVE-2017-18026 Wed, 10 Jan 2018 09:29:00 +0000 High CVE-2017-18026

Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary commands (through the Mercurial adapter) via vectors involving a branch whose name begins with a --config= or --debugger= substring, a related issue to CVE-2017-17536.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [High] CVE-2017-15577 – Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki lin... https://nvd.nist.gov/vuln/detail/CVE-2017-15577 https://nvd.nist.gov/vuln/detail/CVE-2017-15577 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15577

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2017-15576 – Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in a... https://nvd.nist.gov/vuln/detail/CVE-2017-15576 https://nvd.nist.gov/vuln/detail/CVE-2017-15576 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15576

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2017-15575 – In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whe... https://nvd.nist.gov/vuln/detail/CVE-2017-15575 https://nvd.nist.gov/vuln/detail/CVE-2017-15575 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15575

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

CVSS: 7.3 · CWE: N/A

View on NVD

]]> [High] CVE-2017-15572 – In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sens... https://nvd.nist.gov/vuln/detail/CVE-2017-15572 https://nvd.nist.gov/vuln/detail/CVE-2017-15572 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15572

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [High] CVE-2015-8474 – Open redirect vulnerability in the valid_back_url function in app/controllers/ap... https://nvd.nist.gov/vuln/detail/CVE-2015-8474 https://nvd.nist.gov/vuln/detail/CVE-2015-8474 Tue, 12 Apr 2016 14:59:05 +0000 High CVE-2015-8474

Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted back_url parameter, as demonstrated by "@attacker.com," a different vulnerability than CVE-2014-1985.

CVSS: 7.4 · CWE: N/A

View on NVD

]]> [High] CVE-2013-4663 – git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remo... https://nvd.nist.gov/vuln/detail/CVE-2013-4663 https://nvd.nist.gov/vuln/detail/CVE-2013-4663 Sun, 28 Dec 2014 00:59:02 +0000 High CVE-2013-4663

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.

CVSS: 7.5 · CWE: CWE-77

View on NVD

]]> [High] CVE-2011-4929 – Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and ... https://nvd.nist.gov/vuln/detail/CVE-2011-4929 https://nvd.nist.gov/vuln/detail/CVE-2011-4929 Mon, 08 Oct 2012 18:55:01 +0000 High CVE-2011-4929

Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.

CVSS: 7.5 · CWE: N/A

View on NVD

]]>