Lucene search

K
osvGoogleOSV:CVE-2017-15569
HistoryOct 18, 2017 - 2:29 a.m.

CVE-2017-15569

2017-10-1802:29:00
Google
osv.dev
2

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list.

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%