NetSight
IP …
medium6.1

CVE-2017-15574

In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment.

Impact

In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment.

Affected products

VendorProductAffected versions
RedmineRedmine
through 3.2.5
Versions 3.3.0, 3.3.1, 3.3.2
DebianDebian Linux
Version 9.0

Weakness classification

CWE-79

References