In Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text formatting, and project homepages.
{
"binaries": [
{
"binary_name": "redmine",
"binary_version": "3.2.1-2ubuntu0.2"
},
{
"binary_name": "redmine-mysql",
"binary_version": "3.2.1-2ubuntu0.2"
},
{
"binary_name": "redmine-pgsql",
"binary_version": "3.2.1-2ubuntu0.2"
},
{
"binary_name": "redmine-sqlite",
"binary_version": "3.2.1-2ubuntu0.2"
}
]
}