Low severity3.5NVD Advisory· Published Apr 28, 2025· Updated Jun 17, 2026

CVE-2025-4011

Description

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. This vulnerability affects unknown code of the component Custom Query Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 6.0.4 is able to address this issue. It is recommended to upgrade the affected component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Redmine/Redminellm-fuzzy
Range: 6.0.0, 6.0.1, 6.0.2, 6.0.3

Patches

Vulnerability mechanics

References

vuldb.comnvd
vuldb.comnvd
vuldb.comnvd
www.redmine.org/issues/42238nvd
www.redmine.org/projects/redmine/wiki/Security_Advisoriesnvd
www.redmine.org/versions/206nvd

News mentions

No linked articles in our index yet.

cvss	0.227
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000