Vulnerabilities in Orangescrum

4 results

CVE-2023-1783MEDIUMOrangeScrum 2.0.11 - AWS Credentials Leak via PDF RenderingEPSS 0.6%CVE-2021-47721HIGHOrangescrum 1.8.0 Authenticated Privilege Escalation via User Session ManipulationEPSS 0.4%CVE-2021-47720HIGHOrangescrum 1.8.0 Authenticated SQL Injection via Multiple ParametersEPSS 0.3%CVE-2021-47716MEDIUMOrangescrum 1.8.0 Cross-Site Scripting via Authenticated EndpointsEPSS 0.2%