CVE-2023-31541
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 1.4%
from disclosure to weapon0 days
Published on NVDJun 13
1st PoCJun 10
exploitation probability
1.4%top 30% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 1
githubgithub.com/DreamD2v/CVE-2023-31541★ 2⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.