medium6.1
CVE-2019-17427
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
Impact
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redmine | Redmine | before 3.4.11 from 4.0.0 before 4.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/RealLinkers/CVE-2019-17427
- https://seclists.org/bugtraq/2019/Nov/31
- https://usn.ubuntu.com/4200-1/
- https://www.debian.org/security/2019/dsa-4574
- https://www.redmine.org/projects/redmine/wiki/Security_Advisories
- https://github.com/RealLinkers/CVE-2019-17427
- https://seclists.org/bugtraq/2019/Nov/31
- https://usn.ubuntu.com/4200-1/
- https://www.debian.org/security/2019/dsa-4574
- https://www.redmine.org/projects/redmine/wiki/Security_Advisories