Project

General

Profile

Actions

Defect #38868

closed

Public URL or Logout Page showing back_url with Internal Server IP and Port

Added by Caspion G almost 2 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

I am using Redmine 5.0.1 with production environment on Windows 10 Professional.

I installed it using Bitnami stack, and upgraded the ruby version to 3.1.4 and it ran successfully. Except I replaced Thin server with PUMA. Now when I use public URL/Domain name to access the site, it shows http://xxx_public_url/login?back_url=http%3A%2F%2F127.0.0.1%3A3001%2F

I tried each and every step, but not finding any solution. I am using IIS for reverse proxy to internal puma server. Please help, as this is exposing my internal server for phishing attacks.

Actions

Also available in: Atom PDF