Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Orangescrum HIGH 8.8
CVE-2021-47721

Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts by manip…

No fix yet
Fix from $1,950 2025-12-23
Orangescrum HIGH 7.1
CVE-2021-47720

Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate database queries through multiple …

No fix yet
Fix from $1,950 2025-12-23
Orangescrum MEDIUM 5.4
CVE-2021-47716

Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts through vario…

No fix yet
Fix from $1,600 2025-12-23
Orangescrum MEDIUM 5.4
CVE-2024-48392

OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lack of inpu…

No fix yet
Fix from $1,600 2025-01-21
Orangescrum HIGH 7.6
CVE-2023-1783

OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not…

No fix yet
Fix from $1,950 2023-06-23
Orangescrum MEDIUM 6.1
CVE-2023-0738

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the applicati…

No fix yet
Fix from $1,600 2023-04-04
Orangescrum MEDIUM 6.1
CVE-2023-0624

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the applicati…

No fix yet
Fix from $1,600 2023-02-09
Orangescrum HIGH 8.1
CVE-2023-0454

OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. This is possible because the ap…

No fix yet
Fix from $1,950 2023-02-01
Orangescrum HIGH 8.8
CVE-2023-0164

OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the applic…

No fix yet
Fix from $1,950 2023-01-18