Redmine 1.2.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redmine:redmine:1.2.1:*:*:*:*:*:*:*

part: a version: 1.2.1 update: *

VendorRedmine (6d6ae2e0-ee18-59af-a962-088f2284e977)
ProductRedmine (bf868930-49a2-5c15-820d-d8b7c109a4c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/redmine purl2cpe 2026-06-01 10:12:13.779200
pkg:deb/ubuntu/redmine purl2cpe 2026-06-01 10:12:13.779201
pkg:github/redmine/redmine purl2cpe 2026-06-01 10:12:13.779203
pkg:redmine/redmine purl2cpe 2026-06-01 10:12:13.779204
pkg:rpm/opensuse/redmine purl2cpe 2026-06-01 10:12:13.779206

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2054 vulnerable 2026-06-08 05:00:52.570573 Details available
Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerability, a different vulnerability than CVE-2012-0327.
Published: 2012-04-04T10:00:00.000Z
Updated: 2024-09-16T20:17:00.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0327 vulnerable 2026-06-08 05:00:40.976667 Details available
Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-04-04T10:00:00.000Z
Updated: 2024-08-06T18:23:30.571Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.