Lucene search
Veracode Vulnerability DatabaseVERACODE:39642HistoryMar 10, 2023 - 10:14 p.m.
Information Disclosure
2023-03-1022:14:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
28
redmine
information disclosure
file attachments
permission checks
configuration
registered user
software
0.002 Low
EPSS
Percentile
52.6%
redmine is vulnerable to Information Disclosure. The library allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| redmine:sid | eq | 4.0.7-1 | |
| redmine:sid | eq | 4.0.7-1 |
Related
cve
cve
CVE-2022-44030
2022-12-06 23:15:10
osv
osv
BIT-redmine-2022-44030
2024-03-06 11:04:14
CVE-2022-44030
2022-12-06 23:15:10
cvelist
cvelist
CVE-2022-44030
2022-12-06 00:00:00
nvd
nvd
CVE-2022-44030
2022-12-06 23:15:10
ubuntucve
ubuntucve
CVE-2022-44030
2022-12-06 00:00:00
prion
prion
Design/Logic Flaw
2022-12-06 23:15:00
debiancve
debiancve
CVE-2022-44030
2022-12-06 23:15:10