CVE-2023-47260

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails...

CVE-2023-47260

CVE-2023-47260 affects Redmine prior to 4.2.11 and 5.0.x prior to 5.0.6, allowing cross-site scripting via thumbnails. The vulnerability is described across multiple sources (OSV OSV-entries and Debian advisory). Affected products/versions: Redmine before 4.2.11 and 5.0.x before 5.0.6. Impact is ...