CVE-2023-31541

CVE-2023-31541CVE-2023-31541

Q: What is the authoritative source for CVE-2023-31541?

CVE-2023-31541 (CVE-2023-31541) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

ckeditor / ckeditor

Description

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

Scoring

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Last modified	2026-07-05

Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.