JVN#93004610: Redmine vulnerable to open redirect

Redmine is a project management software. Redmine contains an open redirect vulnerability due to insufficient checking of the URL parameter.

Impact

A user who logs into Redmine may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack.

Solution

Update the software
Update to the latest version according to the infomration provided by the developer.

Products Affected

• Redmine versions prior to 2.5.1
• Redmine versions prior to 2.4.5