CVE-2021-29274

Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip

published March 29, 2021

CVSS
—
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00829 · 57.1th percentile
Published
2021-03-29T03:46Z
EPSS history
Timeline
  • 29 MAR 03:46Z
    Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip
    cvelistv5