← Back

CVE-2015-8537

nvd nist

Published: Apr 12, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed.

Affected (12)

Products: Debian: Debian Linux · Redmine: Redmine

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Redmine Redmine	version ≤ 2.6.8
Redmine Redmine	Version 3.0.0
Redmine Redmine	Version 3.0.1
Redmine Redmine	Version 3.0.2
Redmine Redmine	Version 3.0.3
Redmine Redmine	Version 3.0.4
Redmine Redmine	Version 3.0.5
Redmine Redmine	Version 3.0.6
Redmine Redmine	Version 3.1.0
Redmine Redmine	Version 3.1.1
Redmine Redmine	Version 3.1.2