CVE-2015-8477

Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash…

published May 23, 2017

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash message rendering.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01509 · 74.2th percentile
Published
2017-05-23T03:56Z
EPSS history
Timeline
  • 23 MAY 03:56Z
    Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving flash…
    cvelistv5