CVE-2017-16804

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote…

published November 13, 2017

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote authenticated users to obtain sensitive information by reading e-mail reminder messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01626 · 75.8th percentile
Published
2017-11-13T20:00Z
EPSS history
Timeline
  • 13 NOV 20:00Z
    In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, which allows remote…
    cvelistv5