Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-15568
HistoryOct 18, 2017 - 2:29 a.m.

Design/Logic Flaw

2017-10-1802:29:00
PRIOn knowledge base
www.prio-n.com
2

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history.

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%