CVE-2019-18890
A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.
Published: 2019-11-21 · CVSS: Unscored
A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7