CVE-2020-36308

Published: Apr 6, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.redmine.org/projects/redmine/wiki/Security_Advisories

x_refsource_MISC

[debian-lts-announce] 20210513 [SECURITY] [DLA 2658-1] redmine security update

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2020-36308

Description

Affected Products

References