Cross-Site Scripting Vulnerability in Redmine 6.0.x
Summary
CVE-2025-4011: A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. Affects redmine versions < 6.0.4+ds-1. Fixed in 6.0.4+ds-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Redmine is a flexible project management web application that includes support for various project management features such as issue tracking, project wikis, and forums. It is widely used in software development and project management environments. The affected versions, 6.0.0 through 6.0.3, have a vulnerability in the Custom Query Handler that allows for cross-site scripting (XSS) attacks, potentially compromising user data and application integrity.
Vulnerability Detail
A vulnerability has been identified in Redmine versions 6.0.0 to 6.0.3, specifically within the Custom Query Handler component. The issue arises from improper handling of the 'Name' argument, which can be manipulated to execute arbitrary JavaScript in the context of the user's browser. This cross-site scripting vulnerability can be exploited remotely, allowing attackers to inject malicious scripts that could steal session cookies, redirect users, or perform other harmful actions.
How To Fix
Minimum fixed version
6.0.4+ds-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade redmineTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit access to the affected functionality or implement input validation on the 'Name' argument to mitigate the risk of XSS attacks until the upgrade can be performed.
Conclusion
The cross-site scripting vulnerability in Redmine versions 6.0.0 to 6.0.3 poses a significant risk to users and their data. It is crucial to upgrade to version 6.0.4 or later to mitigate this risk. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for redmine →
FAQ
The vulnerability is a cross-site scripting (XSS) issue that allows attackers to inject malicious scripts into the application.
Redmine versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 3.5, indicating a moderate level of risk.
If an immediate upgrade is not possible, consider implementing input validation or restricting access to the affected functionality as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for redmine.
