redmine vulnerabilities (Debian)
49 vulnerabilities.
-
redmineDebian Stored credentials in Redmine 5.3 Medium -
redmineDebian Redmine Custom Query cross site scripting 5.1 Medium -
redmineDebian Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails. 6.1 Medium -
redmineDebian Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter. 6.1 Medium -
redmineDebian Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter. 6.1 Medium -
redmineDebian Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to... 6.1 Medium -
redmineDebian Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to... 6.1 Medium -
redmineDebian Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due... 7.5 High -
redmineDebian Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due... 5.3 Medium -
redmineDebian Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x... 7.5 High -
redmineDebian Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the... 5.3 Medium -
redmineDebian Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the... 5.3 Medium -
redmineDebian Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal... 5.3 Medium -
redmineDebian Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private... 7.5 High -
redmineDebian Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. 6.1 Medium -
redmineDebian Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. 6.1 Medium -
redmineDebian Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non... 5.3 Medium -
redmineDebian Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting. 5.3 Medium -
redmineDebian Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes... 9.8 Critical -
redmineDebian A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine... 6.5 Medium -
redmineDebian In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting... 6.1 Medium -
redmineDebian redmine - regression update No score -
redmineDebian Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and ... 8.8 High -
redmineDebian In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb... 4.3 Medium -
redmineDebian Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows... 7.5 High -
redmineDebian Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views,... 7.5 High -
redmineDebian In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the... 7.3 High -
redmineDebian In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document... 6.1 Medium -
redmineDebian In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki... 6.1 Medium -
redmineDebian In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information... 7.5 High -
redmineDebian In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views... 6.1 Medium -
redmineDebian In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views... 6.1 Medium -
redmineDebian In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers... 6.1 Medium -
redmineDebian In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers... 6.1 Medium -
redmineDebian In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text... 6.1 Medium -
redmineDebian Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to... 6.1 Medium -
redmineDebian app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3... 5.3 Medium -
redmineDebian Open redirect vulnerability in the valid_back_url function in app/controllers... 7.4 High -
redmineDebian The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote... 4.3 Medium -
redmineDebian app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3... 5.3 Medium -
redmineDebian Open redirect vulnerability in the redirect_back_or_default function in app/controllers... 5.8 Medium -
redmineDebian Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's... 5.0 Medium -
redmineDebian Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to... 4.3 Medium -
redmineDebian Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0... 7.5 High -
redmineDebian Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine before 1.0.5 allows... 4.3 Medium -
redmineDebian Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows... 4.0 Medium -
redmineDebian Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag... 4.3 Medium -
redmineDebian Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote... 6.8 Medium -
redmineDebian Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote... 4.3 Medium