CVE-2019-17427

Related Files

Ubuntu Security Notice USN-4200-1

Posted Nov 26, 2019

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 4200-1 - It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. It was discovered that an SQL injection could allow users to access protected information via a crafted object query.

tags | advisory, sql injection

systems | linux, ubuntu

advisories | CVE-2019-17427, CVE-2019-18890

SHA-256 | 623c8e3a17e14a602b525ab5f5540e738d4bb3f031a88de1d5acd06feb27ea0e

Download | Favorite | View

Debian Security Advisory 4574-1

Posted Nov 20, 2019

Authored by Debian | Site debian.org

Debian Linux Security Advisory 4574-1 - Hoger Just discovered an SQL injection in Redmine, a project management web application. In addition a cross-site scripting issue was found in Textile formatting.

tags | advisory, web, xss, sql injection

systems | linux, debian

advisories | CVE-2019-17427, CVE-2019-18890

SHA-256 | f1645c9f2dabbdc81219cfc176d38ae5e5f0545878192b80541326f30e08efaf

Download | Favorite | View