CVE-2017-15568

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-15568
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15568.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-15568
Downstream
Published
2017-10-18T02:29:00.280Z
Modified
2026-05-18T05:49:30.467718290Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of issue history.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "last_affected": "9.0"
                }
            ],
            "source": "CPE_FIELD",
            "vendor_product": "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / github.com/redmine/redmine

Affected ranges

Type
GIT
Repo
https://github.com/redmine/redmine
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb97158c976c41911e3e875136b21055c294084e
Last affected
6655bc6d4049a948d35986416c1912c810012ff0
Last affected
93cd8829a79fb3b9e354a0589bf8c354247af11e
Last affected
7827d9cdf8c0f198b776bcd88881a57d83390ee1
Last affected
7068d29898fed73f977e85987ee187f82384b72e
Last affected
d357acec85c4bf3621ac549e3e3c809a984528ee
Last affected
c6e341a59b705eb40b4b102c699344fef15f0cad
Last affected
c4b35955103291b5f1a290360bcb5aecb0c06aa5
Last affected
72bd36c647b514d37c7761db5ae2f54cda70b569
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.2.7"
        },
        {
            "last_affected": "3.3.0"
        },
        {
            "last_affected": "3.3.1"
        },
        {
            "last_affected": "3.3.2"
        },
        {
            "last_affected": "3.3.3"
        },
        {
            "last_affected": "3.3.4"
        },
        {
            "last_affected": "3.4.0"
        },
        {
            "last_affected": "3.4.1"
        },
        {
            "last_affected": "3.4.2"
        }
    ],
    "source": "CPE_FIELD",
    "cpe": [
        "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.3.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.3.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.4.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:redmine:redmine:3.4.2:*:*:*:*:*:*:*"
    ]
}

Affected versions

3.*
3.2.7
3.3.0
3.3.1
3.3.2
3.3.3
3.3.4
3.4.0
3.4.1
3.4.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15568.json"