← Database

CVE-2009-4078

MEDIUM CVSS: 4.3 Published: 2009-11-25 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Platforms

Redmine Redmine

Weakness Type

CWE-79

References