Redmine Information Disclosure Vulnerability (CNVD-2017-36111)

Redmine is a set of open source Web-based project management and defect tracking tools . The tool provides project management , issue tracking and role-based access control and other features . A security vulnerability exists in the 'reminders' function in the app/models/mailer.rb file in Redmine...

CVE-2017-16804: Exposure of Sensitive Information to an Unauthorized Actor

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages...