Redmine

2019-09-11

12:57 Redmine Defect #32049 (Closed): Redmine allows same user to login from different machines simulteniously

Using Redmine 4.0.4
Able to Login using same user credentials from different machines at same time.
Expected :... Amit Mehendale

2019-08-28

14:41 Redmine Defect #31968 (Resolved): MIME Content Type is not properly handled while attaching the files

added a new code in attachment.rb, en.yml(for custom error message).
Attaching new file for further reference.
... Amit Mehendale

13:01 Redmine Defect #31968: MIME Content Type is not properly handled while attaching the files

Thanks for prompt help.
Made necessary Changes. Still file is getting uploaded in the system.
We need to block ... Amit Mehendale

08:19 Redmine Defect #31968 (Resolved): MIME Content Type is not properly handled while attaching the files

Recently upgraded to 4.0.4. While doing the Information security testing, Team raised a vulnerability
*"The applicat... Amit Mehendale

2019-08-20

08:20 Redmine Help: OWASP or OTG-AUTHN-001 Sensitive Data Exposure in Redmine 4.0.4

We have implemented Redmine 4.0.4 recently. During VAPT security team came with an observation *"Sensitive informatio... Amit Mehendale