Skip to content
OpenAdvisories
Unscored DSA-3529-1 4 CVEs

redmine - security update

Published Mar 23, 2016 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 redmine 3.0~20140825-8~deb8u2

Vulnerabilities 4

  • Unscored —

    app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote atta…

  • Unscored —

    The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to…

  • Unscored —

    Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine befo…

  • Unscored —

    app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote atta…