{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/redmine--6.0.12-6.1.x--6.1.6-7.0.x--7.0.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Redmine (\u003c 6.0.12, 6.1.x \u003c 6.1.6, 7.0.x \u003c 7.0.3)"],"_cs_severities":["medium"],"_cs_tags":["vulnerability","webserver","patch-management"],"_cs_type":"advisory","_cs_vendors":["Redmine"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified in Redmine that may permit remote exploitation. These issues include cross-site scripting (XSS), security policy bypasses, and denial-of-service (DoS) conditions. The CERT-FR advisory references security patches issued by the Redmine project on November 2, 2026.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Redmine to version 6.0.12, 6.1.6, 7.0.3, or later as specified in the official Redmine security advisories.\u003c/li\u003e\n\u003cli\u003eReview the Redmine security advisories page for specific patching instructions and version compatibility.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T15:34:25Z","date_published":"2026-11-02T15:34:25Z","id":"https://feed.craftedsignal.io/briefs/2026-11-redmine-vulnerabilities/","summary":"Multiple vulnerabilities in Redmine allow remote attackers to perform cross-site scripting (XSS), bypass security policies, or trigger denial-of-service conditions.","title":"Redmine: Multiple security vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-11-redmine-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - Redmine (\u003c 6.0.12, 6.1.x \u003c 6.1.6, 7.0.x \u003c 7.0.3)","version":"https://jsonfeed.org/version/1.1"}