logo

Database

SQL injection In redmine

Description

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2019-188902. NVD-2019-188903. OSV-DEBIAN-2019-188904. OSV-2019-188905. SECURITY-TRACKER-CVE-2019-18890

References

1. https://github.com/RealLinkers/CVE-2019-18890

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.