CVE-2009-4078
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2009-4078
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2009-4078.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2009-4078
- Published
- 2009-11-25T22:00:00Z
- Modified
- 2025-02-07T05:00:04Z
- Summary
- [none]
- Details
-
Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- References
-
- http://secunia.com/advisories/37420
- http://www.vupen.com/english/advisories/2009/3291
- http://jvn.jp/en/jp/JVN01245481/index.html
- http://jvn.jp/en/jp/JVN87341298/index.html
- http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000073.html
- http://rubyforge.org/frs/shownotes.php?release_id=41108
- http://www.redmine.org/wiki/redmine/Changelog#v086-2009-11-04
- http://www.securityfocus.com/bid/37066
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54333
- https://security-tracker.debian.org/tracker/CVE-2009-4078
Affected packages
Debian:12 / redmine
Package
- Name
- redmine
- Purl
- pkg:deb/debian/redmine?arch=source