CVE-2023-1783

Summary

CVE-2023-1783 is a vulnerability affecting OrangeScrum version 2.0.11. An attacker can exploit this issue by providing maliciously crafted HTML content to the application, which is then converted to PDF. The application fails to adequately validate this content, allowing the attacker to obtain AWS instance credentials remotely. This vulnerability poses a significant risk as it enables unauthorized access to AWS resources. Organizations using OrangeScrum version 2.0.11 should update to a patched version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.