Описание
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 3.3.1-4+deb9u1build0.17.10.1 |
| bionic | not-affected | 3.4.2-1 |
| cosmic | not-affected | 3.4.2-1 |
| devel | DNE | |
| disco | not-affected | 3.4.2-1 |
| eoan | not-affected | 3.4.2-1 |
| esm-apps/bionic | not-affected | 3.4.2-1 |
| esm-apps/focal | not-affected | 3.4.2-1 |
| esm-apps/xenial | needed | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
Показывать по
4 Medium
CVSS2
4.3 Medium
CVSS3
Связанные уязвимости
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function ...
In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.
4 Medium
CVSS2
4.3 Medium
CVSS3