CVE-2024-11479

creationtimestamp| type| source ---|---|--- 2024-12-04 00:36:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113591754077053543 2024-12-04 03:22:05+00:00| seen| https://t.me/cvedetector/11923...

CVE-2024-11479

CVE-2024-11479 concerns Issuetrak 17.1. An authenticated user can inject HTML into ticket comments, which is then rendered in emails sent to all users on that ticket. The affected component is the comment handling in tickets; the root cause is HTML injection in comments. Publicly stated impact is...

CVE-2024-11479 Authenticated HTML Injection in Issuetrak Ticket Comment Function

A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket...