Security Advisory
CVE-2023-0454
8.1
HIGH
Vulnerability Description
OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. This is possible because the application uses an unsanitized attacker-controlled parameter to construct an internal path.
Published Date
February 1, 2023
Official Source
NIST NVD Advisory