Redmine 1.3.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redmine:redmine:1.3.0:*:*:*:*:*:*:*

part: a version: 1.3.0 update: *

VendorRedmine (6d6ae2e0-ee18-59af-a962-088f2284e977)
ProductRedmine (bf868930-49a2-5c15-820d-d8b7c109a4c4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/redmine purl2cpe 2026-06-01 10:12:13.779221
pkg:deb/ubuntu/redmine purl2cpe 2026-06-01 10:12:13.779222
pkg:github/redmine/redmine purl2cpe 2026-06-01 10:12:13.779223
pkg:redmine/redmine purl2cpe 2026-06-01 10:12:13.779225
pkg:rpm/opensuse/redmine purl2cpe 2026-06-01 10:12:13.779226

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2054 vulnerable 2026-06-08 05:00:52.570622 Details available
Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the (1) Comment, (2) Document, (3) IssueCategory, (4) MembersController, (5) Message, (6) News, (7) TimeEntry, (8) Version, (9) Wiki, (10) UserPreference, or (11) Board model via a modified URL, related to a "mass assignment" vulnerability, a different vulnerability than CVE-2012-0327.
Published: 2012-04-04T10:00:00.000Z
Updated: 2024-09-16T20:17:00.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0327 vulnerable 2026-06-08 05:00:40.978744 Details available
Cross-site scripting (XSS) vulnerability in Redmine before 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2012-04-04T10:00:00.000Z
Updated: 2024-08-06T18:23:30.571Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.