CVE-2019-15950: redmineup crm – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2019-15950

보통 6.1CVE-2019-15950 · Published 16/09/2019 · updated 17/06/2026

요약

CVE-2019-15950은(는) crm (redmineup)에 영향을 주는 보통 (CVSS 6.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.89%, 전체 취약점의 59.5%보다 높음.
조치: 4.2.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
crm redmineup	`< 4.2.4`	`4.2.4`

Description

The CRM Plugin before 4.2.4 for Redmine allows XSS via crafted vCard data.

References

zerohax/RedmineUP-XSS · Exploit
redmineup.com/pages/plugins/crm/updates · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free