CVE-2022-44030

概要

参考情報

• redmine.org/news/139 · Release Notes
• redmine.org/projects/redmine/wiki/Security_Advisories · Patch

redmine のその他の脆弱性

• CVE-2023-47260中 6.1Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
• CVE-2023-47259中 6.1Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.
• CVE-2023-47258中 6.1Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
• CVE-2022-44637中 6.1Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization in Redcloth3 Textile…
• CVE-2022-44031中 6.1Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote sy…