Description
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.
Remediation
References
Related Vulnerabilities
WordPress Plugin WangGuard Cross-Site Scripting (1.7.1)
WordPress Plugin Duplicate Post Cross-Site Scripting (2.6)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37150)
WordPress Plugin Easy Digital Downloads-Recent Purchases Remote File Inclusion (1.0.2)
WordPress Plugin Qtranslate Slug Cross-Site Request Forgery (1.1.18)