File Upload Vulnerability in Redmine by Redmine
CVE-2021-31865

5.3MEDIUM

Key Information:

Vendor: Redmine
Status: Redmine
Vendor: CVE Published:; 28 April 2021

What is CVE-2021-31865?

A security issue in Redmine allows users to bypass restrictions on allowed filename extensions for uploaded attachments. Versions prior to 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 are affected. Malicious users could exploit this vulnerability to upload potentially harmful files, which may lead to further security risks within the application.