CVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

EUVD-2025-203399

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-60786

The iceScrum v7.54 Pro On-prem project management software is affected by a Zip Slip vulnerability within the import a Project component. This flaw occurs when the application fails to properly validate file paths during the extraction of uploaded files, allowing an attacker to upload a crafted Z...

PT-2025-51249

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-60786: Improper Limitation of a Pathname to a Restricted Directory

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

iceScrum security vulnerabilities

iceScrum is a project management software from the French company iceScrum. A security vulnerability exists in iceScrum version v7.54, which stems from a Zip Slip vulnerability in the Import Project component that could lead to the execution of arbitrary code...

CVE-2025-60786

A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file...

CVE-2025-60785

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

EUVD-2025-37508

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

CVE-2025-60785

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

CVE-2025-60785

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

IceScrum security vulnerabilities

IceScrum is a project management software from the French company IceScrum. A security vulnerability exists in IceScrum that originates from specially crafted HTML pages that can lead to remote code execution...

CVE-2025-60785

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

CVE-2025-60785: Improper Control of Generation of Code

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

CVE-2025-60785

A remote code execution RCE vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page...

PT-2025-44783

Name of the Vulnerable Software and Affected Versions iceScrum versions 7.54 Pro On-prem Description A remote code execution RCE issue exists in the Postgres Drivers component of iceScrum. An attacker can execute arbitrary code by using a specially crafted HTML page. Recommendations At the moment...

CVE-2025-60785

A remote code execution (RCE) vulnerability exists in the Postgres Drivers component of iceScrum v7.54 Pro On-prem . The flaw allows an attacker to execute arbitrary code by interacting with a specially crafted HTML page . This vulnerability is associated with CWE-94 (Improper Control of Generati...