CVE-2023-47259

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...

PT-2023-9191 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions prior to 4.2.11 Redmine versions 5.0.x prior to 5.0.6 Description: The issue is related to a component in the Redmine web application for project and task management, specifically in the Markdown formatter. It allows for...

CVE-2023-47259

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...

CVE-2023-47260

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails...

CVE-2023-47260: Improper Neutralization of Input During Web Page Generation

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails...

CVE-2023-47259

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter...

CVE-2023-47259

CVE-2023-47259 affects Redmine prior to 4.2.11 and 5.0.x prior to 5.0.6, where the Textile formatter permits cross-site scripting (XSS). The root cause is improper handling within the Textile formatter, enabling an attacker to execute script in a user’s browser. The vulnerability is documented ac...

CVE-2023-47260

CVE-2023-47260 affects Redmine prior to 4.2.11 and 5.0.x prior to 5.0.6, allowing cross-site scripting via thumbnails. The vulnerability is described across multiple sources (OSV OSV-entries and Debian advisory). Affected products/versions: Redmine before 4.2.11 and 5.0.x before 5.0.6. Impact is ...

CVE-2023-47260

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails...

CVE-2023-47258

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter...

CVE-2023-47260

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails...

The vulnerability of the Redmine project and task management web application relates to incorrect session expiration times, allowing attackers to continue existing user sessions after two-factor authentication is enabled.

The vulnerability of the Redmine project and task management web application is related to an incorrect session expiration time. Exploiting this vulnerability allows a malicious actor to continue existing user sessions after two-factor authentication is enabled...

The vulnerability of the Redmine project and task management web application, related to improper handling of exceptional states, allows a hacker to upload and execute any file they desire.

The vulnerability of the Redmine project and task management web application lies in the improper handling of exceptional states. Exploiting this vulnerability allows a malicious actor to remotely upload and execute any file they desire...

The vulnerability in the Redmine project and task management web application relates to the lack of security measures for the website structure, allowing an attacker to carry out XSS attacks.

The vulnerability in the Redmine project and task management web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability in the Redmine project and task management web application relates to the lack of security measures for the website structure, allowing an attacker to carry out XSS attacks.

The vulnerability in the Redmine project and task management web application relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

Unrestricted file upload

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...

CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server...