Security Advisory

CVE-2021-30164

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-06 07:58:51
Last updated 2024-08-03 22:24:59
Assigner mitre
State PUBLISHED

Description

Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API.