Read the docs

Redmine

Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Redmine records in CISA KEV

No Redmine vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Redmine Git Hosting Plugin · all components

Priority LOW 37

git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related to the get_info_refs…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01944 Published 2014-12-28 No fix listed CWE-77
Open these records in search →