CVE-2019-17427 - In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors · CoreCVE

MEDIUM

In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors

Published Oct 10, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 1.60%

In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7819		Advisory
https://github.com/RealLinkers/CVE-2019-17427		x_refsource_MISC
https://seclists.org/bugtraq/2019/Nov/31		mailing-listx_refsource_BUGTRAQ
https://usn.ubuntu.com/4200-1/		vendor-advisoryx_refsource_UBUNTU
https://www.debian.org/security/2019/dsa-4574		vendor-advisoryx_refsource_DEBIAN
https://www.redmine.org/projects/redmine/wiki/Security_Advisories		x_refsource_MISCVendor Advisory