769 matches found
Cross site scripting
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...
Design/Logic Flaw
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter...
UBUNTU-CVE-2023-47259
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...
UBUNTU-CVE-2023-47258
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter...
Redmine Security Vulnerabilities
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides features such as project management, issue tracking and role-based access control. A security vulnerability exists in Redmine versions prior to 4.2.11 and 5.0.x prior to 5.0.6, which stem...
CVE-2023-47259
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...
Redmine Security Vulnerabilities
Redmine is a set of open source Web-based project management and defect tracking tools . The product provides features such as project management, issue tracking and role-based access control. A security vulnerability exists in Redmine versions prior to 4.2.11 and 5.0.x prior to 5.0.6, which stem...
PT-2023-9190 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.2.11 Redmine versions 5.0.x prior to 5.0.6 Description: The issue is related to a lack of protection in the structure of web pages, allowing for cross-site scripting XSS attacks in the Textile formatter. This could...
PT-2023-9191 · Redmine · Redmine
Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.2.11 Redmine versions 5.0.x prior to 5.0.6 Description: The issue is related to a component in the Redmine web application for project and task management, specifically in the Markdown formatter. It allows for...
CVE-2023-47259
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...
CVE-2023-47259
CVE-2023-47259 affects Redmine prior to 4.2.11 and 5.0.x prior to 5.0.6, where the Textile formatter permits cross-site scripting (XSS). The root cause is improper handling within the Textile formatter, enabling an attacker to execute script in a user’s browser. The vulnerability is documented ac...
CVE-2023-47259
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...
Greenshot 1.3.274 Deserialization / Command Execution Exploit
There exists a .NET deserialization vulnerability in Greenshot versions 1.3.274 and below. The deserialization allows the execution of commands when a user opens a Greenshot file. The commands execute under the same permissions as the Greenshot service. Typically, it is the logged in user. This...
Expandable Formatter - Moderately critical - Cross Site Scripting - SA-CONTRIB-2023-028
This module enables you to render a field in an expandable/collapsible region. The module doesn't sufficiently sanitize the field content when displaying it to an end user. This vulnerability is mitigated by the fact that an attacker must have a role capable of creating content that uses the fiel...
PT-2023-8923 · Mediawiki +2 · Mediawiki +2
Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.11 MediaWiki versions 1.36.x through 1.38.x before 1.38.7 MediaWiki versions 1.39.x before 1.39.4 MediaWiki versions 1.40.x before 1.40.1 Description: The issue is related to a possibility of using XSS in the...
MAL-2023-742 Malicious code in recurrence-formatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 970492e695237c754d7801c30cdab26ae4402dd14fe49a15fbe5a009641021e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in recurrence-formatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 970492e695237c754d7801c30cdab26ae4402dd14fe49a15fbe5a009641021e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Fedora: Security Advisory for rust-comrak (FEDORA-2023-e9243281cb)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-comrak (FEDORA-2023-b37722768e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
