CVE-2023-47258

Name of the Vulnerable Software and Affected Versions Redmine versions prior to 4.2.11 Redmine versions 5.0.x prior to 5.0.6

Description The issue is related to a component in the Redmine web application for project and task management, specifically in the Markdown formatter. It allows for cross-site scripting (XSS) attacks due to insufficient protection of the web page structure. An attacker can exploit this issue to conduct cross-site scripting attacks.

Recommendations For Redmine versions prior to 4.2.11, update to version 4.2.11 or later. For Redmine versions 5.0.x prior to 5.0.6, update to version 5.0.6 or later.