CVE-2023-47258
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
Original description
The description as published by the source.
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
Affected packages
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.2.11"},{"introduced":"5.0.0"},{"fixed":"5.0.6"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-47258 redmine Fixed in: 5.0.4-5+deb12u1
References
- advisory redmine.org
- web nvd.nist.gov