Redmine 5.x before 5.0.4 allows downloading of file attachments of any Issue or any Wiki page due to insufficient permission checks. Depending on the configuration, this may require login as a registered user.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-44030.json"