CVE-2022-44637
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user.
Paquets affectés
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.2.9"},{"introduced":"5.0.0"},{"fixed":"5.0.4"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-44637 redmine Corrigé dans: 5.0.4-1
Références
- advisory redmine.org
- web nvd.nist.gov