DeutschShown in its original language — a full translation is planned for a future version.
Redmine.org Redmine: Mehrere Schwachstellen
view advisory published 2022-12-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Redmine.org Redmine ausnutzen, um Sicherheitsvorkehrungen zu umgehen und einen Cross Site Scripting Angriff oder einen Open Redirect Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-44637US | medium6.1 | — | ||
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile-formatted fields. Depending on the conf… | ||||
| CVE-2022-44031US | medium6.1 | — | ||
Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields. | ||||
| CVE-2022-44030US | high7.5 | — | ||
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may requir… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan