CVE-2023-47259

Summary

CVE-2023-47259 is a newly disclosed vulnerability affecting Redmine versions before 4.2.11 and 5.0.x before 5.0.6. This issue permits Cross-Site Scripting (XSS) attacks in the Textile formatter, potentially allowing malicious actors to inject malicious scripts into web pages viewed by other users. Successful exploitation could lead to unauthorized access to user data or sessions, or even the execution of remote code. Users are advised to upgrade to the latest stable releases of Redmine to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.