CVE-2023-47260
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
Original description
The description as published by the source.
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
Affected packages
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"4.2.11"},{"introduced":"5.0.0"},{"fixed":"5.0.6"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-47260 redmine Fixed in: 5.0.4-5+deb12u1
References
- advisory redmine.org
- web nvd.nist.gov