Lucene search
GoogleOSV:CVE-2023-1783HistoryJun 23, 2023 - 10:15 p.m.
CVE-2023-1783
2023-06-2322:15:08
Google
osv.dev
orangescrum
remote attacker
aws credentials
html validation
pdf conversion
OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials. This is possible because the application does not properly validate the HTML content to be converted to PDF.
Related
nvd
nvd
CVE-2023-1783
2023-06-23 22:15:08
cve
cve
CVE-2023-1783
2023-06-23 22:15:08
cvelist
cvelist
CVE-2023-1783 OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering
2023-06-23 21:55:48
prion
prion
Hardcoded credentials
2023-06-23 22:15:00