Unrated

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted obje...

CVE-2019-18890 First seen on SecPulse Nov 22, 2019

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2019-18890 redmine Fixed in: 3.4.2-1

Original description The description as published by the source.

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory security-tracker.debian.org
advisory debian.org
advisory redmine.org
package github.com
web seclists.org
web usn.ubuntu.com

Key facts

Severity: Unrated
Published: Nov 22, 2019
First seen on SecPulse: Nov 22, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50