CVE-2017-15577

HIGH

Redmine < 3.2.6 and 3.3.x < 3.3.3 - Exposure of Sensitive Information via Wiki Link Rendering

Title source: llm

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

Core 3

Core References

Patch, Vendor Advisory x_refsource_confirm

Third Party Advisory vendor-advisory x_refsource_debian

Permissions Required x_refsource_confirm

CVSS v3 7.5

EPSS 0.0162

EPSS Percentile 73.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-200

Status published

Products (5)

debian/debian_linux 9.0

redmine/redmine 3.3.0

redmine/redmine 3.3.1

redmine/redmine 3.3.2

redmine/redmine < 3.2.5

Published Oct 18, 2017

Tracked Since Feb 18, 2026