Unrated
In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.
CVE-2019-17427
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-17427 redmine Fixed in: 4.0.4-1
References
- advisory debian.org
- advisory redmine.org
- package github.com
- web seclists.org
- web usn.ubuntu.com