Linux Distros Unpatched Vulnerability : CVE-2021-31865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments...

The vulnerability in the Redmine project and task management web application, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability in the Redmine project and task management web application relates to the bypassing of allowed file extension restrictions for uploaded attachments. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...