Project

General

Profile

Actions

Security Advisories » History » Revision 2

« Previous | Revision 2/77 (diff) | Next »
Jean-Philippe Lang, 2012-03-11 11:02


Redmine Security Advisories

This page lists the security vulnerabilities that were fixed in Redmine releases, starting from 1.3.0. If you think that you've found a security vulnerability, please report it by sending an email to: security(at)redmine.org.

Fixed in Redmine 1.3.2

  • Moderate: persistent XSS vulnerability (affected version: all previous releases)
  • Moderate: mass-assignemnt vulnerability that would allow an attacker to bypass part of the security checks (affected version: all previous releases)

Fixed in Redmine 1.3.0

  • High: vulnerability that would allow an attacker to bypass the CSRF protection (affected version: all previous releases)

Updated by Jean-Philippe Lang about 12 years ago · 2 revisions locked