high8.1
CVE-2024-36267
Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4.
Impact
Path traversal vulnerability exists in Redmine DMSF Plugin versions prior to 3.1.4. If this vulnerability is exploited, a logged-in user may obtain or delete arbitrary files on the server (within the privilege of the Redmine process).
Affected products
| Product | Affected versions |
|---|---|
| Redmine DMSF Plugin | before 3.1.4. |
Versions were read from the advisory text. No structured product data has been published for this record yet.