CVE-2024-11479 — Authenticated HTML Injection in Issuetrak Ticket Comment Function

CVE-2024-11479

Authenticated HTML Injection in Issuetrak Ticket Comment Function PUBLISHED

Description (CNA)

A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket.

Affected (CNA)

Vendor / product	Versions
Issuetrak / Issuetrak	affected Issuetrak 17.1

CWE

CWE-79, CWE-80

References

https://helpcenter.issuetrak.com/home/2340-issuetrak-release-notes

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.