CVE-2017-15570: Improper Neutralization of Input During Web Page Generation

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/list.html.erb via crafted column data...

Redmine Information Disclosure Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . An information acquisition vulnerability exists in the app/views/timelog/form.html.erb file in Redmine....

CVE-2015-8346: Undefined Security Weakness

app/views/timelog/form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form...