CVE-2015-8537

5.3 MEDIUM

Published: April 12, 2016 Modified: May 06, 2026

Description

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.debian.org/security/2016/dsa-3529

Source: cve@mitre.org

http://www.redmine.org/news/103

Source: cve@mitre.org

Patch Vendor Advisory

https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56

Source: cve@mitre.org

http://www.debian.org/security/2016/dsa-3529

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redmine.org/news/103

Source: af854a3a-2127-422b-91ae-364da2661108

Patch Vendor Advisory

https://github.com/redmine/redmine/commit/7e423fb4538247d59e01958c48b491f196a1de56

Source: af854a3a-2127-422b-91ae-364da2661108

6 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.3 / 10.0

EPSS (Exploit Probability)

0.5%

64th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

redmine debian

Related CVEs