CVE-2024-48392

概要

参考情報

• Renzusclarke/CVE-2024-48392-PoC · Exploit
• Renzusclarke/CVE-2024-48392-PoC · Exploit
• orangescrum.com · Product

orangescrum のその他の脆弱性

• CVE-2021-47721高 8.8Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts…
• CVE-2021-47720高 7.1Orangescrum 1.8.0 contains an authenticated SQL injection vulnerability that allows authorized users to manipulate database queries through …
• CVE-2021-47716中 5.4Orangescrum 1.8.0 contains multiple cross-site scripting vulnerabilities that allow authenticated attackers to inject malicious scripts thro…
• CVE-2023-1783高 7.6OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application…
• CVE-2023-0738中 6.1OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the …