CVE Daily – Redmine https://cvedaily.com/pages/tags/redmine.html CVE Daily – Redmine en Wed, 03 Jun 2026 21:27:06 +0000 [Low] CVE-2025-4011 – A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified... https://nvd.nist.gov/vuln/detail/CVE-2025-4011 https://nvd.nist.gov/vuln/detail/CVE-2025-4011 Mon, 28 Apr 2025 09:15:21 +0000 Low CVE-2025-4011

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custom Query Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.0.4 is able to address this issue. It is recommended to upgrade the affected component.

CVSS: 3.5 · CWE: CWE-79

View on NVD

]]> [High] CVE-2024-36267 – Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1... https://nvd.nist.gov/vuln/detail/CVE-2024-36267 https://nvd.nist.gov/vuln/detail/CVE-2024-36267 Thu, 30 May 2024 06:15:09 +0000 High CVE-2024-36267

Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server (within the privilege of the Redmine process).

CVSS: 8.1 · CWE: CWE-22

View on NVD

]]> [Medium] CVE-2023-47260 – Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails. https://nvd.nist.gov/vuln/detail/CVE-2023-47260 https://nvd.nist.gov/vuln/detail/CVE-2023-47260 Sun, 05 Nov 2023 04:15:10 +0000 Medium CVE-2023-47260

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2023-47259 – Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter... https://nvd.nist.gov/vuln/detail/CVE-2023-47259 https://nvd.nist.gov/vuln/detail/CVE-2023-47259 Sun, 05 Nov 2023 04:15:10 +0000 Medium CVE-2023-47259

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2023-47258 – Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter. https://nvd.nist.gov/vuln/detail/CVE-2023-47258 https://nvd.nist.gov/vuln/detail/CVE-2023-47258 Sun, 05 Nov 2023 04:15:10 +0000 Medium CVE-2023-47258

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2023-31541 – A unrestricted file upload vulnerability was discovered in the ‘Browse and uploa... https://nvd.nist.gov/vuln/detail/CVE-2023-31541 https://nvd.nist.gov/vuln/detail/CVE-2023-31541 Tue, 13 Jun 2023 17:15:14 +0000 Critical CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

CVSS: 9.8 · CWE: CWE-434

View on NVD

]]> [Medium] CVE-2022-44637 – Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile... https://nvd.nist.gov/vuln/detail/CVE-2022-44637 https://nvd.nist.gov/vuln/detail/CVE-2022-44637 Mon, 12 Dec 2022 03:15:09 +0000 Medium CVE-2022-44637

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2022-44031 – Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile... https://nvd.nist.gov/vuln/detail/CVE-2022-44031 https://nvd.nist.gov/vuln/detail/CVE-2022-44031 Mon, 12 Dec 2022 03:15:09 +0000 Medium CVE-2022-44031

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [High] CVE-2022-44030 – Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or ... https://nvd.nist.gov/vuln/detail/CVE-2022-44030 https://nvd.nist.gov/vuln/detail/CVE-2022-44030 Tue, 06 Dec 2022 23:15:10 +0000 High CVE-2022-44030

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

CVSS: 7.5 · CWE: CWE-755

View on NVD

]]> [Medium] CVE-2021-42326 – Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on a... https://nvd.nist.gov/vuln/detail/CVE-2021-42326 https://nvd.nist.gov/vuln/detail/CVE-2021-42326 Tue, 12 Oct 2021 19:15:08 +0000 Medium CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter.

CVSS: 5.3 · CWE: N/A

View on NVD

]]> [High] CVE-2021-37156 – Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling t... https://nvd.nist.gov/vuln/detail/CVE-2021-37156 https://nvd.nist.gov/vuln/detail/CVE-2021-37156 Thu, 05 Aug 2021 21:15:12 +0000 High CVE-2021-37156

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated.

CVSS: 7.5 · CWE: CWE-613

View on NVD

]]> [Medium] CVE-2021-31866 – Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the valu... https://nvd.nist.gov/vuln/detail/CVE-2021-31866 https://nvd.nist.gov/vuln/detail/CVE-2021-31866 Wed, 28 Apr 2021 07:15:07 +0000 Medium CVE-2021-31866

Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal authentication keys by observing timing differences in string comparison operations within SysController and MailHandlerController.

CVSS: 5.3 · CWE: CWE-203

View on NVD

]]> [Medium] CVE-2021-31865 – Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to... https://nvd.nist.gov/vuln/detail/CVE-2021-31865 https://nvd.nist.gov/vuln/detail/CVE-2021-31865 Wed, 28 Apr 2021 07:15:07 +0000 Medium CVE-2021-31865

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments.

CVSS: 5.3 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-31864 – Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attacker... https://nvd.nist.gov/vuln/detail/CVE-2021-31864 https://nvd.nist.gov/vuln/detail/CVE-2021-31864 Wed, 28 Apr 2021 07:15:07 +0000 Medium CVE-2021-31864

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permission requirement by leveraging the incoming mail handler.

CVSS: 5.3 · CWE: N/A

View on NVD

]]> [High] CVE-2021-31863 – Insufficient input validation in the Git repository integration of Redmine befor... https://nvd.nist.gov/vuln/detail/CVE-2021-31863 https://nvd.nist.gov/vuln/detail/CVE-2021-31863 Wed, 28 Apr 2021 07:15:07 +0000 High CVE-2021-31863

Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows Redmine users to read arbitrary local files accessible by the application server process.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-30164 – Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_i... https://nvd.nist.gov/vuln/detail/CVE-2021-30164 https://nvd.nist.gov/vuln/detail/CVE-2021-30164 Tue, 06 Apr 2021 08:15:12 +0000 Critical CVE-2021-30164

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-30163 – Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the nam... https://nvd.nist.gov/vuln/detail/CVE-2021-30163 https://nvd.nist.gov/vuln/detail/CVE-2021-30163 Tue, 06 Apr 2021 08:15:12 +0000 High CVE-2021-30163

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to project_id values.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-36308 – Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the sub... https://nvd.nist.gov/vuln/detail/CVE-2020-36308 https://nvd.nist.gov/vuln/detail/CVE-2020-36308 Tue, 06 Apr 2021 08:15:12 +0000 Medium CVE-2020-36308

Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries.

CVSS: 5.3 · CWE: CWE-74

View on NVD

]]> [Medium] CVE-2020-36307 – Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline li... https://nvd.nist.gov/vuln/detail/CVE-2020-36307 https://nvd.nist.gov/vuln/detail/CVE-2020-36307 Tue, 06 Apr 2021 08:15:12 +0000 Medium CVE-2020-36307

Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2020-36306 – Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. https://nvd.nist.gov/vuln/detail/CVE-2020-36306 https://nvd.nist.gov/vuln/detail/CVE-2020-36306 Tue, 06 Apr 2021 08:15:12 +0000 Medium CVE-2020-36306

Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-25026 – Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile... https://nvd.nist.gov/vuln/detail/CVE-2019-25026 https://nvd.nist.gov/vuln/detail/CVE-2019-25026 Tue, 06 Apr 2021 08:15:12 +0000 Medium CVE-2019-25026

Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting.

CVSS: 5.3 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-29274 – Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled i... https://nvd.nist.gov/vuln/detail/CVE-2021-29274 https://nvd.nist.gov/vuln/detail/CVE-2021-29274 Mon, 29 Mar 2021 04:15:13 +0000 Medium CVE-2021-29274

Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-18890 – A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 a... https://nvd.nist.gov/vuln/detail/CVE-2019-18890 https://nvd.nist.gov/vuln/detail/CVE-2019-18890 Thu, 21 Nov 2019 18:15:11 +0000 Medium CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.

CVSS: 6.5 · CWE: CWE-89

View on NVD

]]> [Medium] CVE-2019-17427 – In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to te... https://nvd.nist.gov/vuln/detail/CVE-2019-17427 https://nvd.nist.gov/vuln/detail/CVE-2019-17427 Thu, 10 Oct 2019 02:05:46 +0000 Medium CVE-2019-17427

In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2019-15950 – The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data. https://nvd.nist.gov/vuln/detail/CVE-2019-15950 https://nvd.nist.gov/vuln/detail/CVE-2019-15950 Mon, 16 Sep 2019 16:15:10 +0000 Medium CVE-2019-15950

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [High] CVE-2017-18026 – Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block ... https://nvd.nist.gov/vuln/detail/CVE-2017-18026 https://nvd.nist.gov/vuln/detail/CVE-2017-18026 Wed, 10 Jan 2018 09:29:00 +0000 High CVE-2017-18026

Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary commands (through the Mercurial adapter) via vectors involving a branch whose name begins with a --config= or --debugger= substring, a related issue to CVE-2017-17536.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2017-16804 – In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/mo... https://nvd.nist.gov/vuln/detail/CVE-2017-16804 https://nvd.nist.gov/vuln/detail/CVE-2017-16804 Mon, 13 Nov 2017 20:29:00 +0000 Medium CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.

CVSS: 4.3 · CWE: CWE-200

View on NVD

]]> [High] CVE-2017-15577 – Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki lin... https://nvd.nist.gov/vuln/detail/CVE-2017-15577 https://nvd.nist.gov/vuln/detail/CVE-2017-15577 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15577

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2017-15576 – Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in a... https://nvd.nist.gov/vuln/detail/CVE-2017-15576 https://nvd.nist.gov/vuln/detail/CVE-2017-15576 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15576

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2017-15575 – In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whe... https://nvd.nist.gov/vuln/detail/CVE-2017-15575 https://nvd.nist.gov/vuln/detail/CVE-2017-15575 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15575

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

CVSS: 7.3 · CWE: N/A

View on NVD

]]> [Medium] CVE-2017-15574 – In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using ... https://nvd.nist.gov/vuln/detail/CVE-2017-15574 https://nvd.nist.gov/vuln/detail/CVE-2017-15574 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2017-15574

In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2017-15573 – In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mis... https://nvd.nist.gov/vuln/detail/CVE-2017-15573 https://nvd.nist.gov/vuln/detail/CVE-2017-15573 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2017-15573

In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [High] CVE-2017-15572 – In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sens... https://nvd.nist.gov/vuln/detail/CVE-2017-15572 https://nvd.nist.gov/vuln/detail/CVE-2017-15572 Wed, 18 Oct 2017 02:29:00 +0000 High CVE-2017-15572

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.

CVSS: 7.5 · CWE: CWE-532

View on NVD

]]> [Medium] CVE-2017-15571 – In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists ... https://nvd.nist.gov/vuln/detail/CVE-2017-15571 https://nvd.nist.gov/vuln/detail/CVE-2017-15571 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2017-15571

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2017-15570 – In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists ... https://nvd.nist.gov/vuln/detail/CVE-2017-15570 https://nvd.nist.gov/vuln/detail/CVE-2017-15570 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2017-15570

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2017-15569 – In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists ... https://nvd.nist.gov/vuln/detail/CVE-2017-15569 https://nvd.nist.gov/vuln/detail/CVE-2017-15569 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2017-15569

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2017-15568 – In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists ... https://nvd.nist.gov/vuln/detail/CVE-2017-15568 https://nvd.nist.gov/vuln/detail/CVE-2017-15568 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2017-15568

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2016-10515 – In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile ... https://nvd.nist.gov/vuln/detail/CVE-2016-10515 https://nvd.nist.gov/vuln/detail/CVE-2016-10515 Wed, 18 Oct 2017 02:29:00 +0000 Medium CVE-2016-10515

In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2015-8477 – Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote a... https://nvd.nist.gov/vuln/detail/CVE-2015-8477 https://nvd.nist.gov/vuln/detail/CVE-2015-8477 Tue, 23 May 2017 04:29:01 +0000 Medium CVE-2015-8477

Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering.

CVSS: 6.1 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2015-8537 – app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, an... https://nvd.nist.gov/vuln/detail/CVE-2015-8537 https://nvd.nist.gov/vuln/detail/CVE-2015-8537 Tue, 12 Apr 2016 14:59:06 +0000 Medium CVE-2015-8537

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed.

CVSS: 5.3 · CWE: CWE-200

View on NVD

]]> [High] CVE-2015-8474 – Open redirect vulnerability in the valid_back_url function in app/controllers/ap... https://nvd.nist.gov/vuln/detail/CVE-2015-8474 https://nvd.nist.gov/vuln/detail/CVE-2015-8474 Tue, 12 Apr 2016 14:59:05 +0000 High CVE-2015-8474

Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted back_url parameter, as demonstrated by "@attacker.com," a different vulnerability than CVE-2014-1985.

CVSS: 7.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2015-8473 – The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1... https://nvd.nist.gov/vuln/detail/CVE-2015-8473 https://nvd.nist.gov/vuln/detail/CVE-2015-8473 Tue, 12 Apr 2016 14:59:04 +0000 Medium CVE-2015-8473

The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages by leveraging permission to read issues with related changesets from other projects.

CVSS: 4.3 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2015-8346 – app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, an... https://nvd.nist.gov/vuln/detail/CVE-2015-8346 https://nvd.nist.gov/vuln/detail/CVE-2015-8346 Tue, 12 Apr 2016 14:59:03 +0000 Medium CVE-2015-8346

app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form.

CVSS: 5.3 · CWE: CWE-199

View on NVD

]]> [High] CVE-2013-4663 – git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remo... https://nvd.nist.gov/vuln/detail/CVE-2013-4663 https://nvd.nist.gov/vuln/detail/CVE-2013-4663 Sun, 28 Dec 2014 00:59:02 +0000 High CVE-2013-4663

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs function or (2) the reqfile argument to the file_exists function.

CVSS: 7.5 · CWE: CWE-77

View on NVD

]]> [Medium] CVE-2014-1985 – Open redirect vulnerability in the redirect_back_or_default function in app/cont... https://nvd.nist.gov/vuln/detail/CVE-2014-1985 https://nvd.nist.gov/vuln/detail/CVE-2014-1985 Fri, 11 Apr 2014 14:55:05 +0000 Medium CVE-2014-1985

Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the back url (back_url parameter).

CVSS: 5.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2011-4929 – Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and ... https://nvd.nist.gov/vuln/detail/CVE-2011-4929 https://nvd.nist.gov/vuln/detail/CVE-2011-4929 Mon, 08 Oct 2012 18:55:01 +0000 High CVE-2011-4929

Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2011-4928 – Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine bef... https://nvd.nist.gov/vuln/detail/CVE-2011-4928 https://nvd.nist.gov/vuln/detail/CVE-2011-4928 Mon, 08 Oct 2012 18:55:00 +0000 Medium CVE-2011-4928

Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2011-4927 – Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x befo... https://nvd.nist.gov/vuln/detail/CVE-2011-4927 https://nvd.nist.gov/vuln/detail/CVE-2011-4927 Mon, 08 Oct 2012 18:55:00 +0000 Medium CVE-2011-4927

Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows remote authenticated users to obtain sensitive information via unknown vectors.

CVSS: 4.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2012-2054 – Redmine before 1.3.2 does not properly restrict the use of a hash to provide val... https://nvd.nist.gov/vuln/detail/CVE-2012-2054 https://nvd.nist.gov/vuln/detail/CVE-2012-2054 Thu, 05 Apr 2012 14:55:05 +0000 Medium CVE-2012-2054

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerabilit…

CVSS: 5.0 · CWE: CWE-255

View on NVD

]]> [Medium] CVE-2012-0327 – Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote a... https://nvd.nist.gov/vuln/detail/CVE-2012-0327 https://nvd.nist.gov/vuln/detail/CVE-2012-0327 Thu, 05 Apr 2012 14:55:04 +0000 Medium CVE-2012-0327

Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2011-1723 – Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redm... https://nvd.nist.gov/vuln/detail/CVE-2011-1723 https://nvd.nist.gov/vuln/detail/CVE-2011-1723 Tue, 19 Apr 2011 19:55:02 +0000 Medium CVE-2011-1723

Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to projects/hg-helloworld/news/. NOTE: some of these details are obtained from third party information.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2009-4459 – Redmine 0.8.7 and earlier uses the title tag before defining the character encod... https://nvd.nist.gov/vuln/detail/CVE-2009-4459 https://nvd.nist.gov/vuln/detail/CVE-2009-4459 Wed, 30 Dec 2009 20:00:01 +0000 Medium CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as script by Internet Explorer 7 and 8.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2009-4079 – Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier all... https://nvd.nist.gov/vuln/detail/CVE-2009-4079 https://nvd.nist.gov/vuln/detail/CVE-2009-4079 Wed, 25 Nov 2009 22:00:00 +0000 Medium CVE-2009-4079

Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors.

CVSS: 6.8 · CWE: CWE-352

View on NVD

]]> [Medium] CVE-2009-4078 – Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier... https://nvd.nist.gov/vuln/detail/CVE-2009-4078 https://nvd.nist.gov/vuln/detail/CVE-2009-4078 Wed, 25 Nov 2009 22:00:00 +0000 Medium CVE-2009-4078

Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]> [Medium] CVE-2008-4481 – Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows rem... https://nvd.nist.gov/vuln/detail/CVE-2008-4481 https://nvd.nist.gov/vuln/detail/CVE-2008-4481 Wed, 08 Oct 2008 02:00:01 +0000 Medium CVE-2008-4481

Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS: 4.3 · CWE: CWE-79

View on NVD

]]>