Orangescrum vulnerabilities

Products

• Orangescrum 9

Newest

• orangescrum Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints CVE-2021-47716 5.1 MediumDecember 23, 2025
• orangescrum Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation CVE-2021-47721 8.7 HighDecember 23, 2025
• orangescrum Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters CVE-2021-47720 8.7 HighDecember 23, 2025
• orangescrum OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious... CVE-2024-48392 Public exploit 5.4 MediumJanuary 21, 2025
• orangescrum OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering CVE-2023-1783 6.5 MediumJune 23, 2023
• orangescrum OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the... CVE-2023-0738 6.1 MediumApril 4, 2023
• orangescrum OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the... CVE-2023-0624 6.1 MediumFebruary 9, 2023
• orangescrum OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local... CVE-2023-0454 8.1 HighFebruary 1, 2023
• orangescrum OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary... CVE-2023-0164 8.8 HighJanuary 18, 2023