CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the Browse and upload images feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 88%
VendorProductVersion
ckeditorckeditor
1.2.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://redmine.com
http://redmineckeditor.com
https://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md
http://redmine.com
http://redmineckeditor.com
https://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md