medium6.1
CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.
Impact
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redmine | Redmine | from 4.1.0 before 4.1.2 |