Lucene search
+L

Redmine SQL Injection Vulnerability

🗓️ 20 Nov 2019 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 59 Views

Redmine has a SQL injection flaw from unvalidated SQL inputs, enabling arbitrary SQL execution.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for SQL Injection in Redmine
2 Jan 202011:44
–githubexploit
githubexploit
GithubExploit
Exploit for Cross-site Scripting in Redmine
3 Jan 202019:25
–githubexploit
bdu_fstec
BDU FSTEC
Redmine SQL Injection Unauthorized Access
6 Apr 202000:00
–bdu_fstec
checkpoint_advisories
Check Point Advisories
Redmine SQL Injection (CVE-2019-18890)
20 Feb 202000:00
–checkpoint_advisories
cve
CVE
CVE-2019-18890
21 Nov 201917:46
–cve
cvelist
Cvelist
CVE-2019-18890
21 Nov 201917:46
–cvelist
debian
Debian
[SECURITY] [DSA 4574-1] redmine security update
19 Nov 201919:03
–debian
debiancve
Debian CVE
CVE-2019-18890
21 Nov 201917:46
–debiancve
nessus
Tenable Nessus
Debian DSA-4574-1 : redmine - security update
20 Nov 201900:00
–nessus
nessus
Tenable Nessus
Ubuntu 16.04 LTS / 18.04 LTS : Redmine vulnerabilities (USN-4200-1)
26 Nov 201900:00
–nessus
Rows per page
Vulners
Node
OR
redmineredmineRange≤3.2.9
redmine*_<10Range<3.3.10

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Jan 2020 00:00Current
8.2High risk
Vulners AI Score8.2
CVSS 24
CVSS 3.16.5
EPSS0.04338
59