CVE-2022-44031

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Te...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami redmine

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.2.9"},{"introduced":"5.0.0"},{"fixed":"5.0.4"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-44031 redmine Corrigé dans: 5.0.4-1

Références

advisory redmine.org
web nvd.nist.gov