VULNERABILITY INTELLIGENCE

CVE-2024-11479

EPSS probability0.39%
CISA KEVNot currently listed
Published2024-12-04
Last modified2026-06-17

Description

A HTML Injection vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user. HTML markup could be added to comments of tickets, which when submitted will render in the emails sent to all users on that ticket.

Weakness classification

  • b7efe717-a805-47cf-8e9a-921fca0ce0ce: CWE-79

Primary references