CVE-2022-44030

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami redmine

[{"type":"SEMVER","events":[{"introduced":"5.0.0"},{"fixed":"5.0.4"}]}]

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-44030 redmine Corrigé dans: 5.0.4-1

Références

advisory redmine.org
advisory redmine.org
web nvd.nist.gov