NetSight
IP …
high7.5

CVE-2017-15577

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

Impact

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

Affected products

VendorProductAffected versions
RedmineRedmine
through 3.2.5
Versions 3.3.0, 3.3.1, 3.3.2
DebianDebian Linux
Version 9.0

Weakness classification

CWE-200

References