CVE-2023-1783

概要

参考情報

• fluidattacks.com/advisories/stirling · Exploit
• Orangescrum/orangescrum · Product

orangescrum のその他の脆弱性

• CVE-2021-47721高 8.8Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts…
• CVE-2021-47720高 7.1Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate database queries through …
• CVE-2021-47716中 5.4Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts thro…
• CVE-2024-48392中 5.4OrangeScrum v2.0.11 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into user email due to lac…
• CVE-2023-0738中 6.1OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the …