Security Advisories » History » Version 2

« Previous - Version 2/14 (diff) - Next » - Current version
Jean-Philippe Lang, 2012-03-11 11:02


Redmine Security Advisories

This page lists the security vulnerabilities that were fixed in Redmine releases, starting from 1.3.0. If you think that you've found a security vulnerability, please report it by sending an email to: security(at)redmine.org.

Fixed in Redmine 1.3.2

  • Moderate: persistent XSS vulnerability (affected version: all previous releases)
  • Moderate: mass-assignemnt vulnerability that would allow an attacker to bypass part of the security checks (affected version: all previous releases)

Fixed in Redmine 1.3.0

  • High: vulnerability that would allow an attacker to bypass the CSRF protection (affected version: all previous releases)