GCVE - cpe:2.3:a:redmine:redmine:3.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:redmine:redmine:3.0.2:*:*:*:*:*:*:*

part: a version: 3.0.2 update: *

Vendor	Redmine (`6d6ae2e0-ee18-59af-a962-088f2284e977`)
Product	Redmine (`bf868930-49a2-5c15-820d-d8b7c109a4c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/redmine`	purl2cpe	2026-06-01 10:12:13.779642
`pkg:deb/ubuntu/redmine`	purl2cpe	2026-06-01 10:12:13.779643
`pkg:github/redmine/redmine`	purl2cpe	2026-06-01 10:12:13.779645
`pkg:redmine/redmine`	purl2cpe	2026-06-01 10:12:13.779646
`pkg:rpm/opensuse/redmine`	purl2cpe	2026-06-01 10:12:13.779648

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-8537`	vulnerable	2026-06-08 05:07:04.283615	Details available app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed. Published: 2016-04-12T14:00:00.000Z Updated: 2024-08-06T08:20:42.525Z Open on db.gcve.eu Reference links http://www.redmine.org/news/103 https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56 http://www.debian.org/security/2016/dsa-3529	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8474`	vulnerable	2026-06-08 05:07:04.106833	Details available Open redirect vulnerability in the valid_back_url function in app/controllers/application_controller.rb in Redmine before 2.6.7, 3.0.x before 3.0.5, and 3.1.x before 3.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted back_url parameter, as demonstrated by "@attacker.com," a different vulnerability than CVE-2014-1985. Published: 2016-04-12T14:00:00.000Z Updated: 2024-08-06T08:20:41.873Z Open on db.gcve.eu Reference links http://www.redmine.org/news/101 https://www.redmine.org/issues/19577 http://www.debian.org/security/2016/dsa-3529 https://github.com/redmine/redmine/commit/032f2c9be6520d9d1a1608aa4f1d5d1f184f2472 http://www.securityfocus.com/bid/78625	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8473`	vulnerable	2026-06-08 05:07:04.103639	Details available The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages by leveraging permission to read issues with related changesets from other projects. Published: 2016-04-12T14:00:00.000Z Updated: 2024-08-06T08:20:41.872Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/78621 https://www.redmine.org/projects/redmine/wiki/Changelog_3_0 https://www.redmine.org/issues/21136 https://www.redmine.org/versions/105 https://www.redmine.org/projects/redmine/wiki/Changelog_3_1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8346`	vulnerable	2026-06-08 05:07:03.657687	Details available app/views/timelog/_form.html.erb in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote attackers to obtain sensitive information about subjects of issues by viewing the time logging form. Published: 2016-04-12T14:00:00.000Z Updated: 2024-08-06T08:13:32.347Z Open on db.gcve.eu Reference links https://www.redmine.org/issues/21150 http://www.redmine.org/news/102 http://www.debian.org/security/2016/dsa-3529 https://github.com/redmine/redmine/commit/c096dde88ff02872ba35edc4dc403c80a7867b5c	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.