RedmineCVEs & Vulnerabilities
51 CVEs affecting Redmine products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
51 CVEs→ All vendors
Most Affected Products
redmine 390redmine git hosting plugin 1
CVE-2009-4079MEDIUM
Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors.
26 Nov 2009
6.8
CVSS
CVE-2009-4078MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
26 Nov 2009
4.3
CVSS
CVE-2008-4481MEDIUM
Cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
8 Oct 2008
4.3
CVSS