Project

General

Profile

Actions

Security Advisories » History » Revision 1

Revision 1/77 | Next »
Jean-Philippe Lang, 2012-03-11 10:57


Redmine Security Advisories

This page lists the security vulnerabilities that were fixed in Redmine releases, starting from 1.3.0.

Fixed in Redmine 1.3.2

  • Moderate: persistent XSS vulnerability (affected version: all previous releases)
  • Moderate: mass-assignemnt vulnerability that would allow an attacker to bypass part of the security checks (affected version: all previous releases)

Fixed in Redmine 1.3.0

  • High: vulnerability that would allow an attacker to bypass the CSRF protection (affected version: all previous releases)

Updated by Jean-Philippe Lang about 12 years ago · 1 revisions locked