GCVE - cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*

part: a version: 3.3.4 update: *

Vendor	Redmine (`6d6ae2e0-ee18-59af-a962-088f2284e977`)
Product	Redmine (`bf868930-49a2-5c15-820d-d8b7c109a4c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/redmine`	purl2cpe	2026-06-01 10:12:13.779845
`pkg:deb/ubuntu/redmine`	purl2cpe	2026-06-01 10:12:13.779846
`pkg:github/redmine/redmine`	purl2cpe	2026-06-01 10:12:13.779848
`pkg:redmine/redmine`	purl2cpe	2026-06-01 10:12:13.779849
`pkg:rpm/opensuse/redmine`	purl2cpe	2026-06-01 10:12:13.779850

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-15571`	vulnerable	2026-06-08 05:08:58.946187	Details available In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data. Published: 2017-10-18T02:00:00.000Z Updated: 2024-08-05T19:57:27.043Z Open on db.gcve.eu Reference links https://www.redmine.org/projects/redmine/wiki/Security_Advisories https://www.debian.org/security/2018/dsa-4191 https://www.redmine.org/issues/27186 https://github.com/redmine/redmine/commit/273dd9cb3bcfb1e0a0b90570b3b34eafa07d67aa	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15570`	vulnerable	2026-06-08 05:08:58.945681	Details available In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data. Published: 2017-10-18T02:00:00.000Z Updated: 2024-08-05T19:57:27.047Z Open on db.gcve.eu Reference links https://www.redmine.org/projects/redmine/wiki/Security_Advisories https://github.com/redmine/redmine/commit/1a0976417975a128b0a932ba1552c37e9414953b https://www.debian.org/security/2018/dsa-4191 https://www.redmine.org/issues/27186	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15569`	vulnerable	2026-06-08 05:08:58.945141	Details available In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list. Published: 2017-10-18T02:00:00.000Z Updated: 2024-08-05T19:57:27.010Z Open on db.gcve.eu Reference links https://www.redmine.org/projects/redmine/wiki/Security_Advisories https://www.debian.org/security/2018/dsa-4191 https://www.redmine.org/issues/27186 https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-15568`	vulnerable	2026-06-08 05:08:58.942874	Details available In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history. Published: 2017-10-18T02:00:00.000Z Updated: 2024-08-05T19:57:27.008Z Open on db.gcve.eu Reference links https://www.redmine.org/projects/redmine/wiki/Security_Advisories https://github.com/redmine/redmine/commit/94f7cfbf990028348b9262578acbc53a94fce448 https://www.debian.org/security/2018/dsa-4191 https://www.redmine.org/issues/27186	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.