CVE-2022-44030

Summary

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.redmine.org/projects/redmine/wiki/Security_Advisories
• https://www.redmine.org/news/139

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.redmine.org/projects/redmine/wiki/Security_Advisories
• https://www.redmine.org/news/139

• ←Previous
• Next→