CVE-2022-44031

6.1 mediumEPSS 0.4%

Medium (6.1) in redmine redmine. EPSS 0.4% chance of exploitation in the next 30 days.

Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization of the blockquote syntax in Textile-formatted fields.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-12-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redmine:redmine

References

https://www.redmine.org/projects/redmine/wiki/Security_Advisories
https://www.redmine.org/projects/redmine/wiki/Security_Advisories

Check your stack JSON