CVE-2024-36267

Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server within the privilege of the Redmine process...

CVE-2024-36267

Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server within the privilege of the Redmine process...

CVE-2024-36267

CVE-2024-36267 describes a path traversal vulnerability in the Redmine DMSF Plugin for Redmine versions prior to 3.1.4. An authenticated user could obtain or delete arbitrary files on the server within the Redmine process privileges. The root cause is a path traversal flaw (CWE-22) in the plugin....

PT-2024-3982 · Unknown · Redmine Dmsf Plugin

Name of the Vulnerable Software and Affected Versions: Redmine DMSF Plugin versions prior to 3.1.4 Description: The issue is related to a path traversal vulnerability in the Redmine DMSF Plugin, which can be exploited by a remote attacker to gain read, modify, or delete access to files. This...