CVE-2022-44030

—

CVSS 3.1

7.5 high

EPSS

<1%p49

Published

Dec 6, 2022 (Dec 6, 2022)

Modified

Jun 17, 2026

Description

Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.

Vendors: redmine
Products: redmine
Weakness: CWE-755
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.