Approved changes feed: RSS · Atom
cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redmine (6d6ae2e0-ee18-59af-a962-088f2284e977) |
|---|---|
| Product | Redmine (bf868930-49a2-5c15-820d-d8b7c109a4c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/redmine |
purl2cpe | 2026-06-01 10:12:13.778842 |
pkg:deb/ubuntu/redmine |
purl2cpe | 2026-06-01 10:12:13.778844 |
pkg:github/redmine/redmine |
purl2cpe | 2026-06-01 10:12:13.778845 |
pkg:redmine/redmine |
purl2cpe | 2026-06-01 10:12:13.778846 |
pkg:rpm/opensuse/redmine |
purl2cpe | 2026-06-01 10:12:13.778848 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1836 |
vulnerable | 2026-07-29 00:29:04.295890 |
Stored credentials in Redmine
The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.
Published: 2026-06-12T13:23:31.810Z
Updated: 2026-06-12T14:00:11.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47260 |
vulnerable | 2026-06-08 06:14:24.569817 |
Details available
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
Published: 2023-11-05T00:00:00.000Z
Updated: 2024-09-05T14:19:21.481Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47259 |
vulnerable | 2026-06-08 06:14:24.569377 |
Details available
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.
Published: 2023-11-05T00:00:00.000Z
Updated: 2024-09-05T14:20:32.583Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47258 |
vulnerable | 2026-06-08 06:14:24.568825 |
Details available
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
Published: 2023-11-05T00:00:00.000Z
Updated: 2024-09-05T14:21:27.100Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44637 |
vulnerable | 2026-06-08 05:49:35.939760 |
Details available
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user.
Published: 2022-12-12T00:00:00.000Z
Updated: 2025-04-23T13:53:41.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44031 |
vulnerable | 2026-06-08 05:49:35.256975 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44030 |
vulnerable | 2026-06-08 05:49:35.256419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42326 |
vulnerable | 2026-06-08 05:35:22.157026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31866 |
vulnerable | 2026-06-08 05:31:54.040722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31865 |
vulnerable | 2026-06-08 05:31:54.040359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31864 |
vulnerable | 2026-06-08 05:31:54.039992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31863 |
vulnerable | 2026-06-08 05:31:54.039610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30164 |
vulnerable | 2026-06-08 05:31:46.993431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30163 |
vulnerable | 2026-06-08 05:31:46.992987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29274 |
vulnerable | 2026-06-08 05:31:26.086652 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36308 |
vulnerable | 2026-06-08 05:25:02.938864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36307 |
vulnerable | 2026-06-08 05:25:02.938355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36306 |
vulnerable | 2026-06-08 05:25:02.937764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25026 |
vulnerable | 2026-06-08 05:13:41.833409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18890 |
vulnerable | 2026-06-08 05:13:12.503636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17427 |
vulnerable | 2026-06-08 05:13:10.492784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-18026 |
vulnerable | 2026-06-08 05:09:10.223714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-16804 |
vulnerable | 2026-06-08 05:09:01.082726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15577 |
vulnerable | 2026-06-08 05:08:58.948674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15576 |
vulnerable | 2026-06-08 05:08:58.948194 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15575 |
vulnerable | 2026-06-08 05:08:58.947787 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15574 |
vulnerable | 2026-06-08 05:08:58.947391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15573 |
vulnerable | 2026-06-08 05:08:58.947007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15572 |
vulnerable | 2026-06-08 05:08:58.946603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15571 |
vulnerable | 2026-06-08 05:08:58.946093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15570 |
vulnerable | 2026-06-08 05:08:58.945588 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15569 |
vulnerable | 2026-06-08 05:08:58.945045 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15568 |
vulnerable | 2026-06-08 05:08:58.939737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10515 |
vulnerable | 2026-06-08 05:07:25.235225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8537 |
vulnerable | 2026-06-08 05:07:04.283558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8477 |
vulnerable | 2026-06-08 05:07:04.110556 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8474 |
vulnerable | 2026-06-08 05:07:04.104165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8473 |
vulnerable | 2026-06-08 05:07:04.103580 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8346 |
vulnerable | 2026-06-08 05:07:03.654860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1985 |
vulnerable | 2026-06-08 05:05:27.043193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2054 |
vulnerable | 2026-06-08 05:00:52.569743 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0327 |
vulnerable | 2026-06-08 05:00:40.947093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4928 |
vulnerable | 2026-06-08 04:59:33.880974 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4459 |
vulnerable | 2026-06-08 04:51:48.575280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4079 |
vulnerable | 2026-06-08 04:51:46.891562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-4078 |
vulnerable | 2026-06-08 04:51:46.878049 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4481 |
vulnerable | 2026-06-08 04:50:39.072437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.