Launchpad.net

CVE 2017-15577

Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information.

See the CVE page on Mitre.org for more details.

References