CVE-2009-4078

Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2009-11-25

http://www.securityfocus.com/bid/37066

http://rubyforge.org/frs/shownotes.php?release_id=41108