CVE-2026-1836 | | | 2026-06-12 | The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to retur… |
CVE-2020-37105 | High | 7.1 | 2026-02-03 | PMB 5.6 contains a SQL injection vulnerability in the administration download script that allows authenticated attackers to execute arbitrary SQL commands thro… |
CVE-2023-47260 | Medium | 6.1 | 2023-11-05 | Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails. |
CVE-2023-47259 | Medium | 6.1 | 2023-11-05 | Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter. |
CVE-2023-47258 | Medium | 6.1 | 2023-11-05 | Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter. |
CVE-2022-44637 | Medium | 6.1 | 2022-12-12 | Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields… |
CVE-2022-44031 | Medium | 6.1 | 2022-12-12 | Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-for… |
CVE-2022-44030 | High | 7.5 | 2022-12-06 | Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configura… |
CVE-2021-42326 | Medium | 5.3 | 2021-10-12 | Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter. |
CVE-2021-37156 | High | 7.5 | 2021-08-05 | Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is f… |
CVE-2021-31866 | Medium | 5.3 | 2021-04-28 | Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal authentication keys by observing timing differences in string co… |
CVE-2021-31865 | Medium | 5.3 | 2021-04-28 | Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments. |
CVE-2021-31864 | Medium | 5.3 | 2021-04-28 | Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permission requirement by leveraging the incomi… |
CVE-2021-31863 | High | 7.5 | 2021-04-28 | Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows Redmine users to rea… |
CVE-2021-30164 | Critical | 9.8 | 2021-04-06 | Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API. |
CVE-2021-30163 | High | 7.5 | 2021-04-06 | Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to proj… |
CVE-2020-36308 | Medium | 5.3 | 2021-04-06 | Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries. |
CVE-2020-36307 | Medium | 6.1 | 2021-04-06 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links. |
CVE-2020-36306 | Medium | 6.1 | 2021-04-06 | Redmine before 4.0.7 and 4.1.x before 4.1.1 has XSS via the back_url field. |
CVE-2019-25026 | Medium | 5.3 | 2021-04-06 | Redmine before 3.4.13 and 4.x before 4.0.6 mishandles markup data during Textile formatting. |
CVE-2021-29274 | Medium | 6.1 | 2021-03-29 | Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip. |
CVE-2019-18890 | Medium | 6.5 | 2019-11-21 | A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query. |
CVE-2019-17427 | Medium | 6.1 | 2019-10-10 | In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors. |
CVE-2017-18026 | High | 8.8 | 2018-01-10 | Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows rem… |
CVE-2017-16804 | Medium | 4.3 | 2017-11-13 | In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote… |
CVE-2017-15577 | High | 7.5 | 2017-10-18 | Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information. |
CVE-2017-15576 | High | 7.5 | 2017-10-18 | Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information. |
CVE-2017-15575 | High | 7.3 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allo… |
CVE-2017-15574 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment. |
CVE-2017-15573 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content. |
CVE-2017-15572 | High | 7.5 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because acc… |
CVE-2017-15571 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data. |
CVE-2017-15570 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data. |
CVE-2017-15569 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value t… |
CVE-2017-15568 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted val… |
CVE-2016-10515 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages. |
CVE-2015-8477 | Medium | 6.1 | 2017-05-23 | Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash mes… |
CVE-2015-8537 | Medium | 5.3 | 2016-04-12 | app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by… |
CVE-2015-8474 | High | 7.4 | 2016-04-12 | Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x… |
CVE-2015-8473 | Medium | 4.3 | 2016-04-12 | The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changes… |
CVE-2015-8346 | Medium | 5.3 | 2016-04-12 | app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information ab… |
CVE-2013-4663 | | | 2014-12-28 | git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the… |
CVE-2014-1985 | | | 2014-04-11 | Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Redmine before 2.4.5 and 2.5.x before 2.5… |
CVE-2011-4929 | | | 2012-10-08 | Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via un… |
CVE-2011-4928 | | | 2012-10-08 | Cross-site scripting (XSS) vulnerability in the textile formatter in Redmine before 1.0.5 allows remote attackers to inject arbitrary web script or HTML via un… |
CVE-2011-4927 | | | 2012-10-08 | Unspecified vulnerability in the bazaar repository adapter in Redmine 1.0.x before 1.0.5 allows remote authenticated users to obtain sensitive information via… |
CVE-2012-2054 | | | 2012-04-05 | Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes i… |
CVE-2012-0327 | | | 2012-04-05 | Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2011-1723 | | | 2011-04-19 | Cross-site scripting (XSS) vulnerability in app/views/layouts/base.rhtml in Redmine 1.0.1 through 1.1.1 allows remote attackers to inject arbitrary web script… |
CVE-2009-4459 | | | 2009-12-30 | Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scriptin… |
CVE-2009-4079 | | | 2009-11-25 | Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that de… |
CVE-2009-4078 | | | 2009-11-25 | Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified… |
CVE-2008-4481 | | | 2008-10-08 | Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |