863 matches found
PT-2021-4608 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.0.7 Redmine versions 4.1.x prior to 4.1.1 Description: The issue is related to a lack of protection for the web page structure, allowing a remote attacker to impact data integrity. The problem can be exploited via...
Redmine 信息泄露漏洞
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in Redmine versions prior to 4.0.8 and versions prior to 4.1.x serie...
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
Cross site scripting
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
CVE-2021-29274
CVE-2021-29274 affects Redmine 4.1.x prior to 4.1.2, where an issue subject is mishandled in the auto-complete tip, enabling cross-site scripting (XSS). The vulnerability is described across multiple sources (Redmine security advisories; OSV/OSVDB; Red Hat Arch Linux advisories). Impact: remote a...
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip...
PT-2021-18158 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions 4.1.0 through 4.1.1 Description: The issue arises from the mishandling of an issue's subject in the auto complete tip, leading to a potential XSS attack. Recommendations: For versions 4.1.0 through 4.1.1, update to version...
Redmine 跨站脚本漏洞
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides features such as project management, issue tracking and role-based access control. A security vulnerability exists in Redmine 4.1.x before 4.1.2, which stems from the subject of an issue...
PT-2021-4587 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions 4.0.0 through 4.0.8 Redmine versions 4.1.0 through 4.1.2 Description: The issue is related to a timing difference in string comparison operations within SysController and MailHandlerController, allowing an attacker to learn...
PT-2021-4524 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.0.8 Redmine versions 4.1.x prior to 4.1.2 Description: The issue in Redmine is related to the disclosure of project id in the issue journal. This could allow a remote attacker to access confidential data if...
PT-2020-6943 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.0.8 Redmine versions 4.1.x prior to 4.1.2 Description: The issue is related to permission handling errors in the Redmine project and task management web application. Exploitation of this issue allows a remote...
The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.
The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...
The vulnerability of the Redmine project and task management web application, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Redmine SQL Injection (CVE-2019-18890)
An SQL injection vulnerability exists in Redmine. Successful exploitation of this vulnerability could lead to arbitrary SQL code execution...
