Vulnerabilities > Redmine > Redmine > 4.0.7
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-04-06 | CVE-2021-30164 | Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API. | 7.5 |
2021-04-06 | CVE-2021-30163 | Information Exposure vulnerability in multiple products Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to project_id values. | 5.0 |