{"id":"CVE-2017-15569","details":"In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value that is mishandled during rendering of an issue list.","modified":"2026-02-23T01:33:49.287485Z","published":"2017-10-18T02:29:00.310Z","references":[{"type":"ADVISORY","url":"https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508"},{"type":"ADVISORY","url":"https://www.debian.org/security/2018/dsa-4191"},{"type":"ADVISORY","url":"https://www.redmine.org/issues/27186"},{"type":"ADVISORY","url":"https://www.redmine.org/projects/redmine/wiki/Security_Advisories"},{"type":"REPORT","url":"https://www.redmine.org/issues/27186"},{"type":"FIX","url":"https://github.com/redmine/redmine/commit/56c8ee0440d8555aa7822d947ba9091c8a791508"},{"type":"FIX","url":"https://www.redmine.org/projects/redmine/wiki/Security_Advisories"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/wordpress/wordpress","events":[{"introduced":"0"},{"last_affected":"a67b6501e7e386f567d75c3abda3e5a0b70703cf"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-15569.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}