CVE-2017-15575

CVE-2017-15575 describes a vulnerability in Redmine versions before 3.2.6 and 3.3.x before 3.3.3, where the Redmine.pm module fails to verify if the Repository module is enabled for a project. This oversight could allow unauthenticated remote attackers to access sensitive repository differences and potentially cause other unspecified impacts. With a CVSSv3 score of 7.3 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to partial loss of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.