CVE-2021-29274
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.
Paquets affectés
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"4.1.0"},{"fixed":"4.1.2"}]}]
Références
- advisory redmine.org
- advisory redmine.org
- web nvd.nist.gov