CVE-2022-44031
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Te...
Original description
The description as published by the source.
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields.
Affected packages
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.2.9"},{"introduced":"5.0.0"},{"fixed":"5.0.4"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-44031 redmine Fixed in: 5.0.4-1
References
- advisory redmine.org
- web nvd.nist.gov