CVE-2022-44030

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks

High · published December 6, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.2th percentile
Published
2022-12-06T00:00Z
EPSS history
Timeline
  • 06 DEC 00:00Z
    Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks
    cvelistv5