Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-31541

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

Published

2023-06-13T17:15:14.810

Last Modified

2025-01-03T20:15:26.650

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses

Type: Primary
CWE-434
Type: Secondary
CWE-434

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ckeditor	ckeditor	1.2.3	Yes

References

http://redmine.com Broken Link ([email protected])
http://redmineckeditor.com Broken Link ([email protected])
https://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md Exploit, Third Party Advisory ([email protected])
http://redmine.com Broken Link (af854a3a-2127-422b-91ae-364da2661108)
http://redmineckeditor.com Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://github.com/DreamD2v/CVE-2023-31541/blob/main/CVE-2023-31541.md Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)