CVE-2023-0454
Last modified
CVE-2023-0454 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. This is possible because the application uses an unsanitized attacker-controlled parameter to construct an internal path.. EPSS estimates a 0.99% chance of exploitation in the next 30 days.
Description
OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. This is possible because the application uses an unsanitized attacker-controlled parameter to construct an internal path.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Orangescrum | Orangescrum | 2.0.11 |
References
- https://fluidattacks.com/advisories/slushii/Exploit, Third Party Advisory
- https://github.com/Orangescrum/orangescrum/Product, Third Party Advisory
- https://fluidattacks.com/advisories/slushii/Exploit, Third Party Advisory
- https://github.com/Orangescrum/orangescrum/Product, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-0454?
How severe is CVE-2023-0454?
How do I fix CVE-2023-0454?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-0448The WP Helper Lite WordPress plugin, in versions < 4.3, retu…6.1
- CVE-2023-0449Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2023-0450An issue has been discovered in GitLab affecting all version…4.6
- CVE-2023-0451Econolite EOS versions prior to 3.2.23 lack a password requi…7.5
- CVE-2023-0452Econolite EOS versions prior to 3.2.23 use a weak hash algor…5.3
- CVE-2023-0453The WP Private Message WordPress plugin (bundled with the Su…4.3
- CVE-2023-0455Unrestricted Upload of File with Dangerous Type in GitHub re…8.8
- CVE-2023-0456A flaw was found in APICast, when 3Scale's OIDC module does …7.5
- CVE-2023-0457Plaintext Storage of a Password vulnerability in Mitsubishi …7.5
- CVE-2023-0458A speculative pointer dereference problem exists in the Linu…4.7
- CVE-2023-0459Copy_from_user on 64-bit versions of the Linux kernel does n…5.5
- CVE-2023-0460The YouTube Embedded 1.2 SDK binds to a service within the Y…7.3
Are you affected by CVE-2023-0454?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST