In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages.
References
Link | Resource |
---|---|
https://www.redmine.org/projects/redmine/wiki/Security_Advisories | Patch Vendor Advisory |
Configurations
Information
Published : 2017-10-17 19:29
Updated : 2017-10-25 05:08
NVD link : CVE-2016-10515
Mitre link : CVE-2016-10515
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
redmine
- redmine