Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-16804
HistoryNov 13, 2017 - 8:29 p.m.

Design/Logic Flaw

2017-11-1320:29:00
PRIOn knowledge base
www.prio-n.com
2

4.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.9%

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.

4.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.9%