Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
redmine redmine vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2020-36308
Redmine prior to 4.0.7 and 4.1.x prior to 4.1.1 allows malicious users to discover the subject of a non-visible issue by performing a CSV export and reading time entries.
Redmine Redmine
Debian Debian Linux 9.0
6.8
CVSSv2
CVE-2017-17536
Phabricator prior to 2017-11-10 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote malicious users to execute arbitrary code by using the web UI to browse a branch whose name begins with a --config= or --debugger= substring.
Phacility Phabricator
4.3
CVSSv2
CVE-2019-15950
The CRM Plugin prior to 4.2.4 for Redmine allows XSS via crafted vCard data.
Redmineup Crm
NA
CVE-2023-31541
A unrestricted file upload vulnerability exists in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.
Ckeditor Ckeditor 1.2.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310
CVE-2024-21683
CVE-2024-22187
chrome
deserialization
XPath injection
CVE-2024-27842
denial of service
CVE-2024-24851
google
CVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6