CVE-2023-31541

Critical · CVSS 9.8

CKEditor plugin for Redmine — Unrestricted File Upload (CWE-434)

CVSS: 9.8; nvd
EPSS: 1.78%; 76th pct
KEV: No
Class: other; CWE-434, CWE-434

Description

A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.3 plugin for Redmine, which allows arbitrary files to be uploaded to the server.

Search profile — drives PoC discovery

Symbols Browse and upload imagesredmine_ckeditorfile uploadimage upload endpointCKEditor v1.2.3

Keywords CVE-2023-31541CKEditor Redmine unrestricted file uploadCKEditor plugin Redmine arbitrary file uploadredmine_ckeditor 1.2.3 uploadBrowse and upload images Redmine CKEditor PoC

Versions: 1.2.3

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

DreamD2v/CVE-2023-31541 needs review

cited in references

gh_search

★ 2

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z