Lucene search
MitreCVELIST:CVE-2015-8474HistoryApr 12, 2016 - 2:00 p.m.
CVE-2015-8474
2016-04-1214:00:00
mitre
www.cve.org
Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted back_url parameter, as demonstrated by “@attacker.com,” a different vulnerability than CVE-2014-1985.
Related
cve
cve
CVE-2015-8474
2016-04-12 14:59:05
CVE-2014-1985
2014-04-11 14:55:05
ubuntucve
ubuntucve
CVE-2015-8474
2016-04-12 00:00:00
CVE-2014-1985
2014-04-11 00:00:00
nvd
nvd
CVE-2015-8474
2016-04-12 14:59:05
CVE-2014-1985
2014-04-11 14:55:05
prion
prion
Open redirect
2016-04-12 14:59:00
Open redirect
2014-04-11 14:55:00
debiancve
debiancve
CVE-2015-8474
2016-04-12 14:59:05
CVE-2014-1985
2014-04-11 14:55:05
freebsd
freebsd
redmine -- open redirect vulnerability
2015-09-20 00:00:00
redmine -- open redirect vulnerability
2014-03-29 00:00:00
nessus
nessus
FreeBSD : redmine -- open redirect vulnerability (3ec2e0bc-9ed7-11e5-8f5c-002590263bf5)
2015-12-10 00:00:00
FreeBSD : redmine -- open redirect vulnerability (c2efcd46-9ed5-11e5-8f5c-002590263bf5)
2015-12-10 00:00:00
Debian DSA-3529-1 : redmine - security update
2016-03-24 00:00:00
jvn
jvn
JVN#93004610: Redmine vulnerable to open redirect
2014-04-16 00:00:00
cvelist
cvelist
CVE-2014-1985
2014-04-11 14:00:00
openvas
openvas
Debian: Security Advisory (DSA-3529-1)
2016-03-22 00:00:00
Debian Security Advisory DSA 3529-1 (redmine - security update)
2016-03-23 00:00:00
debian
debian
[SECURITY] [DSA 3529-1] redmine security update
2016-03-23 18:51:01