CVE-2023-31541

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Jun 13, 2023 (Jun 13, 2023)

Modified

Jul 9, 2026

Description

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

Vendors: ckeditor
Products: ckeditor
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.