Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | redmine | 3.3.1-4+deb9u3 |
Vulnerabilities 2
-
Unscored —CVE-2019-17427 Public exploit
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
-
Unscored —CVE-2019-18890 Public exploit
A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected…