NetSight
IP …
medium6.1

CVE-2017-15573

In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content.

Impact

In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content.

Affected products

VendorProductAffected versions
RedmineRedmine
through 3.2.5
Versions 3.3.0, 3.3.1, 3.3.2
DebianDebian Linux
Version 9.0

Weakness classification

CWE-79

References