Vulnerability CVE-2022-44030
Published: 2022-12-06   Modified: 2022-12-07

Description:
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

 References:
https://www.redmine.org/projects/redmine/wiki/Security_Advisories
https://www.redmine.org/news/139
Copyright 2024, cxsecurity.com

 

Back to Top