4 matches found
CVE-2015-8477
Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...
6.1CVSS5.7AI score
SaveExploits0References8
CVE-2015-8477
Cross-site scripting XSS vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering...
6AI score0.01509EPSS
SaveExploits0References5
CVE-2015-8477
CVE-2015-8477 affects Redmine prior to 2.6.2, where a cross-site scripting (XSS) vulnerability exists in the rendering of flash messages. The underlying issue is improper sanitization of user-controlled content within message rendering, enabling an attacker to inject arbitrary HTML/JavaScript. Im...
6.1CVSS5.9AI score0.01509EPSS
SaveExploits0References5Affected Software1
20