Redmine.org Redmine: Mehrere Schwachstellen ermöglichen Cross-Site Scripting

Summary

Product

Vulnerabilities 3

• Unscored —
  CVE-2023-47258

  Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.

  redmine redmine Debian Ubuntu
  Nov 5, 2023
• Unscored —
  CVE-2023-47259

  Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.

  redmine redmine Debian Ubuntu
  Nov 5, 2023
• Unscored —
  CVE-2023-47260

  Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.

  redmine redmine Debian Ubuntu
  Nov 5, 2023

Revision history

1. 2024-05-26 #2

   Neue Updates von Debian aufgenommen

2. 2023-11-05 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2023-11-05
  https://github.com/advisories/GHSA-g94p-45r2-v659
• GitHub Advisory Database vom 2023-11-05
  https://github.com/advisories/GHSA-qw78-hfxp-rc5g
• Debian Security Advisory DSA-5699 vom 2024-05-24
  https://lists.debian.org/debian-security-announce/2024/msg00109.html