medium6.1
CVE-2020-36307
Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.
Impact
Redmine before 4.0.7 and 4.1.x before 4.1.1 has stored XSS via textile inline links.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redmine | Redmine | before 4.0.7 from 4.1.0 before 4.1.1 |
| Debian | Debian Linux | Version 9.0 |