CVE-2022-44637

creationtimestamp| type| source ---|---|--- 2022-12-12 07:20:39+00:00| seen| https://t.me/cibsecurity/54268 2025-04-23 14:05:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13031...

CVE-2022-44637

CVE-2022-44637 affects Redmine before 4.2.9 and 5.0.x before 5.0.4, where persistent XSS can be triggered via the Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on configuration, exploitation may require login as a registered user. Root cause: insu...

CVE-2022-44637

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the configuration, this may require login as a registered user...