CVE-2011-4928
Priority
Medium
Description
Cross-site scripting (XSS) vulnerability in the textile formatter in
Redmine before 1.0.5 allows remote attackers to inject arbitrary web script
or HTML via unspecified vectors.
Redmine before 1.0.5 allows remote attackers to inject arbitrary web script
or HTML via unspecified vectors.
References
Package
| Upstream: | released (1.0.5-1) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | needed |
| Ubuntu 11.10 (Oneiric Ocelot): | not-affected |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected |
| Ubuntu 13.04 (Raring Ringtail): | not-affected |