Time Entry Rendering Vulnerability in Redmine

Time Entry Rendering Vulnerability in Redmine

CVE-2017-15576 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information.

Learn more about our Web Application Penetration Testing UK.