Orangescrum vulnerabilities
4 published CVEs name Orangescrum among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2021-47716
Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints
Orangescrum · orangescrum
Medium5.1 - CVE-2021-47721
Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation
Orangescrum · orangescrum
High8.7 - CVE-2021-47720
Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters
Orangescrum · orangescrum
High8.7 - CVE-2023-1783
OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering
Orangescrum · Orangescrum
Medium6.5