[SECURITY] [DSA 3529-1] redmine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3529-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 23, 2016 https://www.debian.org/security/faq -...

DSA-3529-1 redmine - security update

Bulletin has no description...

Debian Security Advisory DSA 3529-1 (redmine - security update)

Multiple vulnerabilities have been found in Redmine, a project management web application, which may result in information disclosure. OpenVAS Vulnerability Test $Id: deb3529.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3529-1 using nvtgen 1.0 Script version: 1.0...

Debian: Security Advisory (DSA-3529-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Redmine 未授权访问漏洞

No description provided by source...

Redmine跨站脚本漏洞

No description provided by source...

Redmine Open Redirect Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . An open redirection vulnerability exists in Redmine. An attacker can exploit this vulnerability by constructing a specially crafted URI and enticing a user to access it, redirecting the user to an arbitrary W...

Redmine Cross-Site Scripting Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . A cross-site scripting vulnerability exists in Redmine. An attacker can exploit this vulnerability to execute arbitrary script code, steal cookie-based authentication and launch other attacks...

Redmine Information Disclosure Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . An information disclosure vulnerability exists in Redmine. An attacker can exploit this vulnerability to obtain sensitive information...

FreeBSD : redmine -- open redirect vulnerability (c2efcd46-9ed5-11e5-8f5c-002590263bf5)

Redmine reports : Open Redirect vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in source VuXML an...

FreeBSD : redmine -- multiple vulnerabilities (0e0385d1-9ed5-11e5-8f5c-002590263bf5)

Redmine reports : Mass-assignment vulnerability that would allow an attacker to bypass part of the security checks. Persistent XSS vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databa...

FreeBSD : redmine -- information leak vulnerability (21bc4d71-9ed8-11e5-8f5c-002590263bf5)

Redmine reports : Data disclosure in atom feed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in source VuXML...

FreeBSD : redmine -- information leak vulnerability (49def4b7-9ed6-11e5-8f5c-002590263bf5)

Redmine reports : Potential data leak project names in the invalid form authenticity token error screen. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine...

FreeBSD : redmine -- potential XSS vulnerability (939a7086-9ed6-11e5-8f5c-002590263bf5)

Redmine reports : Potential XSS vulnerability when rendering some flash messages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors...

FreeBSD : redmine -- XSS vulnerability (66ba5931-9ed5-11e5-8f5c-002590263bf5)

Redmine reports : XSS vulnerability %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compile...

FreeBSD : redmine -- CSRF protection bypass (ae377aeb-9ed4-11e5-8f5c-002590263bf5)

Redmine reports : Vulnerability that would allow an attacker to bypass the CSRF protection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and...

FreeBSD : redmine -- multiple vulnerabilities (be63533c-9ed7-11e5-8f5c-002590263bf5)

Redmine reports : Potential changeset message disclosure in issues API. Data disclosure on the time logging form %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques...

FreeBSD : redmine -- open redirect vulnerability (3ec2e0bc-9ed7-11e5-8f5c-002590263bf5)

Redmine reports : Open Redirect vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine and contributors Redistribution and use in source VuXML a...

redmine -- information leak vulnerability

Redmine reports: Data disclosure in atom feed...

Debian DLA-351-1 : redmine security update

It was discovered that there was a data disclosure vulnerability in Redmine, a web-based bug and project management tool. The time logging form could disclose subjects of issues that are not visible/public. Patch by Holger Just. For Debian 6 Squeeze, this issue has been fixed in redmine version...