Information Disclosure Vulnerability in Redmine Project Management Software
CVE-2021-30163

7.5HIGH

Key Information:

Vendor: Redmine
Status: Redmine
Vendor: CVE Published:; 6 April 2021

What is CVE-2021-30163?

An information disclosure vulnerability in Redmine allows unauthorized attackers to identify the names of private projects. This flaw arises when issue journal details reveal changes to project_id values, potentially exposing sensitive project information to unprivileged users. Users running Redmine versions prior to 4.0.8 and 4.1.x before 4.1.2 are particularly at risk. It is recommended to update to the latest versions to mitigate this security issue.