CVE-2023-47260

Description

Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.

Affected packages (2)

• Bitnami/redminefrom 0, < 4.2.11, >= 5.0.0, < 5.0.6
• Debian/redminefrom 0, < 5.0.4-5+deb12u1

CVSS scores

References (3)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2023-47260
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2023-47260
• WEBhttps://www.redmine.org/projects/redmine/wiki/Security_Advisories