0.002 Low
EPSS
Percentile
52.6%
Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.
www.redmine.org/news/139
www.redmine.org/projects/redmine/wiki/Security_Advisories