← All advisories

Medium severity6.1NVD Advisory· Published Oct 10, 2019· Updated Jun 17, 2026

CVE-2019-17427

CVE-2019-17427

Description

In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Redmine/Redmine2 versions
cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*range: <3.4.11
- (no CPE)range: <3.4.11, <4.0.4
Redmine/Redminedescription

Patches

Vulnerability mechanics

References

4

www.redmine.org/projects/redmine/wiki/Security_AdvisoriesnvdVendor Advisory
seclists.org/bugtraq/2019/Nov/31nvd
usn.ubuntu.com/4200-1/nvd
www.debian.org/security/2019/dsa-4574nvd

News mentions

0

No linked articles in our index yet.