CVE-2023-31541

9.8

CRITICALCVSS v3

Published

June 13, 2023

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

ckeditor

NPMJavaScript WYSIWYG web text editor.

= 1.2.3NVD

CKEditor

NuGet GalleryCKEditor is a text editor to be used inside web pages.

= 1.2.3NVD

ckeditor

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

CKEditor is a WYSIWYG editor to be used inside web pages

= 1.2.3NVD

galetahub/ckeditor

GitHubCkeditor 4.x integration gem for rails

= 1.2.3NVD

Security Advisories

CVE-2023-31541

Description

More on this CVE