CVE-2020-13325

A vulnerability was discovered in GitLab versions prior 13.1. The comment section of the issue page was not restricting the characters properly, potentially resulting in a denial of service...

CVE-2020-13325

Removed by vendor...

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...

CVE-2019-16171

CVE-2019-16171 affects JetBrains YouTrack (through 2019.2.56594). Multiple connected sources confirm a Stored XSS on the issue page . The vulnerability is described consistently across Red Hat, CNVD, CNVD-2019-41873, NVD, and related CVE lists. The reports do not provide specific product versions...

CVE-2019-16171

In JetBrains YouTrack through 2019.2.56594, stored XSS was found on the issue page...

GitLab: Stored XSS on Issue details page

Summary: The detail page of Issue the page that provides the content of an Issue is vulnerable to Stored XSS. Description: The two exploits are via the function of submittin an issue or the function of editing an issue. This vulnerability is reproduced in Firefox andChrome. IE11 andEdge are not. ...

DEBIAN-CVE-2009-4459

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...