Security Advisory

CVE-2015-8473

4.3
MEDIUM

Vulnerability Description

The Issues API in Redmine before 2.6.8, 3.0.x before 3.0.6, and 3.1.x before 3.1.2 allows remote authenticated users to obtain sensitive information in changeset messages by leveraging permission to read issues with related changesets from other projects.
Published Date April 12, 2016
Official Source NIST NVD Advisory