Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jwp6-cm96-9ff5

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

EPSS

Процентиль: 72%
0.00717
Низкий

7.3 High

CVSS3

Связанные уязвимости

CVSS3: 7.3
ubuntu
больше 8 лет назад

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

CVSS3: 7.3
nvd
больше 8 лет назад

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allow remote attackers to obtain sensitive differences information or possibly have unspecified other impact.

CVSS3: 7.3
debian
больше 8 лет назад

In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a che ...

CVSS3: 7.3
fstec
больше 8 лет назад

Уязвимость сценария Redmine.pm веб-приложения для управления проектами и задачами Redmine, позволяющая нарушителю получить доступ к защищаемой информации или оказать другое воздействие

EPSS

Процентиль: 72%
0.00717
Низкий

7.3 High

CVSS3