CVE-2021-31864

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permission requirement by leveraging the…

published April 28, 2021

CVSS
—
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permission requirement by leveraging the incoming mail handler.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01240 · 68.9th percentile
Published
2021-04-28T06:16Z
EPSS history
Timeline
  • 28 APR 06:16Z
    Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permission requirement by leveraging the…
    cvelistv5