CVE-2022-44030

high

Description

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

References

https://www.redmine.org/projects/redmine/wiki/Security_Advisories

https://www.redmine.org/news/139

Details

Source: Mitre, NVD

Published: 2022-12-06

Updated: 2025-04-23

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N