Vulnerabilidades de Kagilum
CVEs publicadas que afetam produtos de Kagilum: 2 registro(s), com severidade, exploração e correções.
CVE-2025-60786
Alta · 8.8
CWE-22 15/12/2025
Path Traversal em Kagilum Icescrum
A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.
CVE-2025-60785
Alta · 8.8
CWE-94 03/11/2025
Code Injection em Kagilum Icescrum
A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.