Beveiligingsadvies

CVE-2023-1783

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-23 21:55:48

Laatst bijgewerkt 2024-11-27 19:56:41

Toegewezen door Fluid Attacks

CVSS-score 6.5

Status PUBLISHED

Beschrijving

OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.

← Alle CVE's bekijken Bekijk op cve.org ↗