CVE-2024-36267
Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on …
Published: 2024-05-30 · CVSS: 8.1 · CVSS 3.1
Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server (within the privilege of the Redmine process).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7