CVE-2021-42326 - CVE House
Back to Database
Status published Medium CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the...

Vulnerability Description

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-42326

Credits & Attribution

No credits recorded in the NVD database.

References

More from redmine

View All →
CVE-2022-44637
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS...
Unknown 0
CVE-2022-44031
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS...
Unknown 0
CVE-2022-44030
Redmine 5.x before 5.0.4 allows downloading of file attachments of...
Unknown 0
CVE-2021-37156
Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue...
High 7.5
CVE-2021-31866
Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker...
Medium 5.3

Affected Vendor

Affected Software

redmine, debian linux
Vulnerable Versions:
0, 4.2.0, 9.0

Timeline

Official Publish: October 12th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.