CVE-2021-47720

概要

参考情報

• exploit-db.com/exploits/50553 · Exploit
• orangescrum.org · Product
• vulncheck.com/advisories/orangescrum-authenticated-sql-injection-via-multiple-parameters · Third Party Advisory

orangescrum のその他の脆弱性

• CVE-2021-47721高 8.8Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts…
• CVE-2021-47716中 5.4Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts thro…
• CVE-2024-48392中 5.4OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lac…
• CVE-2023-1783高 7.6OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application…
• CVE-2023-0738中 6.1OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the …