Security Advisory

CVE-2023-1783

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-06-23 21:55:48

Last updated 2024-11-27 19:56:41

Assigner Fluid Attacks

State PUBLISHED

Description

OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.

← Browse all CVEs View on cve.org ↗