CVE-2023-47258

NameCVE-2023-47258
DescriptionRedmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-5699-1
Debian Bugs1055474

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
redmine (PTS)bookworm5.0.4-5vulnerable
bookworm (security)5.0.4-5+deb12u1fixed
sid5.0.4-7vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
redminesourcebookworm5.0.4-5+deb12u1DSA-5699-1
redminesource(unstable)(unfixed)1055474

Notes

https://www.redmine.org/projects/redmine/wiki/Security_Advisories
https://github.com/redmine/redmine/commit/03bcf782463c9b84c6fe53b17cb1b781df6d8771 (5.0-stable)

Search for package or bug name: Reporting problems