CVE-2017-15570

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/list.html.erb via crafted column data...

PT-2017-14102

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 3.2.8 Redmine versions 3.3.x prior to 3.3.5 Redmine versions 3.4.x prior to 3.4.3 Description The issue exists in the app/views/timelog/ list.html.erb file via crafted column data, allowing for XSS. Recommendations Fo...

CVE-2017-15570: Improper Neutralization of Input During Web Page Generation

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/list.html.erb via crafted column data...

Redmine Information Disclosure Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . An information acquisition vulnerability exists in the app/views/timelog/form.html.erb file in Redmine....

CVE-2015-8346: Undefined Security Weakness

app/views/timelog/form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form...

PT-2016-3894

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 2.6.8 Redmine versions 3.0.x prior to 3.0.6 Redmine versions 3.1.x prior to 3.1.2 Description The issue allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form...