CVE-2022-44030
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the...
Original description
The description as published by the source.
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.
Affected packages
Bitnami
redmine
[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.4"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-44030 redmine Fixed in: 5.0.4-1
References
- advisory redmine.org
- advisory redmine.org
- web nvd.nist.gov