CVE-2022-44637
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted...
Original description
The description as published by the source.
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user.
Affected packages
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.2.9"},{"introduced":"5.0.0"},{"fixed":"5.0.4"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-44637 redmine Fixed in: 5.0.4-1
References
- advisory redmine.org
- web nvd.nist.gov