Vulnerabilidades de Redmine
CVEs publicadas que afetam produtos de Redmine: 2 registro(s), com severidade, exploração e correções.
CVE-2026-1836
Média · 5.3
CWE-257 12/06/2026
Stored credentials in Redmine
The system stores the username and password from the login form after submitting the request. This could allow an attacker with access to the platform to return to the browser and view the login credentials.
CVE-2020-37105
Alta · 7.1
CWE-89 03/02/2026
PMB 5.6 - 'logid' SQL Injection
PMB 5.6 contains a SQL injection vulnerability in the administration download script that allows authenticated attackers to execute arbitrary SQL commands through the 'logid' parameter. Attackers can leverage this vulnerability by sending crafted requests to the /admin/sauvegarde/download.php endpoint with manipulated logid values to interact with the database.