CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query

published November 21, 2019

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04338 · 91.2th percentile
Published
2019-11-21T17:46Z
EPSS history
Timeline
  • 21 NOV 17:46Z
    A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query
    cvelistv5