Unrated severityNVD Advisory· Published Jun 23, 2023· Updated Nov 27, 2024
OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering
CVE-2023-1783
Description
OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.
Affected products
1- Range: 2.0.11
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.