Orangescrum vulnerabilities
4 published CVEs name Orangescrum among the affected products.
- Published CVEs
- 4
- Last 12 months
- 3
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20231
- 20253
Newest CVEs
- CVE-2021-47716
Orangescrum 1.8.0 Cross-Site Scripting via Authenticated Endpoints
Orangescrum · orangescrum
Medium5.1 - CVE-2021-47721
Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation
Orangescrum · orangescrum
High8.7 - CVE-2021-47720
Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters
Orangescrum · orangescrum
High8.7 - CVE-2023-1783
OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering
Orangescrum · Orangescrum
Medium6.5