tocsin

Debian/redmine: medium 5.3

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed.

Action: Upgrade redmine to 3.2.0-1 or later.

Affected

introducedfixedlast affected
03.2.0-1-

Fixed versions

3.2.0-1

Sources

published · modified · JSON