CVE-2017-15572

HIGH · CVSS 7.5 EPSS 2.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-15572

Severity

HIGH

CVSS

7.5

EPSS

2.40%

Original NVD Description

In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because account/lost_password does not use a redirect.