CVE-2009-4079: CSRF
Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4079?
CVE-2009-4079 is considered a medium severity vulnerability due to its potential to allow cross-site request forgery attacks.
How do I fix CVE-2009-4079?
To fix CVE-2009-4079, upgrade Redmine to version 0.8.6 or later, as these versions contain patches to address the vulnerability.
What types of attacks can CVE-2009-4079 enable?
CVE-2009-4079 can enable remote attackers to hijack user authentication and perform unauthorized actions, such as deleting tickets.
Which versions of Redmine are affected by CVE-2009-4079?
CVE-2009-4079 affects Redmine versions up to and including 0.8.5.
What is the primary impact of CVE-2009-4079 on users?
The primary impact of CVE-2009-4079 on users is the unauthorized deletion of tickets without user consent.