VYPR
Get started
← All advisories
Medium severity5.3NVD Advisory· Published Apr 12, 2016· Updated May 6, 2026

CVE-2015-8537

CVE-2015-8537

Description

app/views/journals/index.builder in Redmine before 2.6.9, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote attackers to obtain sensitive information by viewing an Atom feed.

Affected products

12
  • Redmine/Redmine11 versions
    cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*range: <=2.6.8
    • cpe:2.3:a:redmine:redmine:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:redmine:redmine:3.1.2:*:*:*:*:*:*:*
  • Debian/Debian Linux
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.