CVE-2021-31864: Medium severity redmine vulnerability
Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the addissuenotes permission requirement by leveraging the incoming mail handler.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-31864?
CVE-2021-31864 is a vulnerability in Redmine versions before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 that allows attackers to bypass the add_issue_notes permission requirement by leveraging the incoming mail handler.
How severe is CVE-2021-31864?
CVE-2021-31864 has a severity rating of 5.3, which is considered medium.
Which software versions are affected by CVE-2021-31864?
Redmine versions before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 are affected by CVE-2021-31864. Additionally, Debian Linux version 9.0 is also affected.
How can I fix CVE-2021-31864?
To fix CVE-2021-31864, it is recommended to upgrade Redmine to version 4.0.9, 4.1.3, or 4.2.1, depending on the currently installed version. For Debian Linux users, upgrading to a newer version is advised.
Where can I find more information about CVE-2021-31864?
You can find more information about CVE-2021-31864 in the following references: [URL1], [URL2], [URL3].