Redmine 1.1.2

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redmine:redmine:1.1.2:*:*:*:*:*:*:*

part: a version: 1.1.2 update: *

VendorRedmine (6d6ae2e0-ee18-59af-a962-088f2284e977)
ProductRedmine (bf868930-49a2-5c15-820d-d8b7c109a4c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/redmine purl2cpe 2026-06-01 10:12:13.779179
pkg:deb/ubuntu/redmine purl2cpe 2026-06-01 10:12:13.779180
pkg:github/redmine/redmine purl2cpe 2026-06-01 10:12:13.779182
pkg:redmine/redmine purl2cpe 2026-06-01 10:12:13.779183
pkg:rpm/opensuse/redmine purl2cpe 2026-06-01 10:12:13.779185

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2054 vulnerable 2026-06-08 05:00:52.570519 Details available
Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerability, a different vulnerability than CVE-2012-0327.
Published: 2012-04-04T10:00:00.000Z
Updated: 2024-09-16T20:17:00.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0327 vulnerable 2026-06-08 05:00:40.975030 Details available
Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-04-04T10:00:00.000Z
Updated: 2024-08-06T18:23:30.571Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.