tocsin

Debian/redmine: unknown

Open redirect vulnerability in the redirect_back_or_default function in app/controllers/application_controller.rb in Redmine before 2.4.5 and 2.5.x before 2.5.1 allows remote attackers to redirect use

Action: Upgrade redmine to 2.5.1-1 or later.

Affected

introducedfixedlast affected
02.5.1-1-

Fixed versions

2.5.1-1

Sources

published · modified · JSON