Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-0738: GitHub - Orangescrum/orangescrum: Orangescrum is a simple yet powerful free and open source project management software that helps team to organize their tasks, projects and deliver more.

OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application. This is possible because the application returns malicious user input in the response with the content-type set to text/html.

CVE
#sql#web#google#apache#git#php

Free, open source Project Management software****Introduction

Orangescrum is the simple yet powerful free and open source project management software that allows teams to organize their tasks, projects and resources with real time project collaboration. Track the task progress and get notifications on their completion with the Orangescrum project management tool. Get the complete picture of all tasks and team activities in real-time. Orangescrum also offers SaaS/Cloud edition and an option to upgrade the community edition to enterprise self-hosted edition.

Orangescrum open-source is a flexible project management web application written using CakePHP.

New features, enhancements, and updates are released on a regular basis.

Pull requests and bug reports are always welcome!

Visit our website to get a free trial of the premium service.

Features

Orangescrum provides the rich set features of Project Management.

The key features are:

  • Task Management
    • Task Groups
    • Tasks
    • Task Type
    • Task View
      • Calendar View
      • List View
    • Task Due Date
    • Task Tracking
  • Time Log
  • Reports & Analytics
  • Email Notifications
  • Import & Export
  • Project Collaboration
  • Default Status Workflow
  • Default User Role Management

Task List View

Add/Edit Task Form View

Task Details View

Project Card View

Dashboard View

We use Orangescrum in our daily jobs to manage our customers information, projects. It is deployed in the production environment of our premium users, and we supported several organizations to deploy this community version on their servers as well. We take care of our open source edition similar than we do for our cloud/enterprise self-hosted edition, in fact both of them use the same code base structure. So feel free to use it in your organization or business!

System Requirements

  • Apache with mod_rewrite
    • Enable curl in php.ini
    • Change the ‘post_max_size’ and upload_max_filesize to 200Mb in php.ini
  • PHP 7.2
  • cakephp 2.8
  • MySQL 5.6 or 5.7
    • If STRICT mode is On, turn it Off.

How to Download the Package from Orangescrum GitHub repository?

To download the Orangescrum Open-source package from the GitHub repository, please follow the process:

Installation

  • Extract the archive. Upload the extracted folder(orangescrum-master) to your working directory.
  • Provide proper write permission to "app/Config", “app/tmp” and “app/webroot” folders and their sub-folders. Ex. chmod -R 0777 app/Config, chmod -R 0777 app/tmp, chmod -R 0777 app/webroot You can change the write permission of “app/Config” folder after installation procedure is completed.
  • Create a new MySQL database named “orangescrum”(utf8_unicode_ci collation).
  • Get the database.sql file from the root directory and import that to your database.
  • Locate your app directory, do the changes on following files:
    • app/Config/database.php - We have already updated the database name as “Orangescrum” which you can change at any point. In order to change it, just create a database using any name and update that name as database in DATABASE_CONFIG section. And also you can set a password for your Mysql login which you will have to update in the same page as password. [Required]
  • Run the application as https://www.your-site.com/ from your browser and start using Orangescrum

For more information please visit below link: https://www.orangescrum.com/open-source/general-installation-guide

Supported Languages

Orangescrum community edition supports the following languages:

  • Danish
  • English
  • French
  • German
  • Portuguese
  • Spanish

Updates

New features, enhancements, and updates appear on a regular basis. You just need to follow these checkpoints:

Make sure to take a backup of your database and files Replace all files in your directory with the updated version.

Users can check the new releases at: https://www.orangescrum.com/open-source/release-notes

Community

Need help to set up Orangescrum? Want to know more about cool enhancements? Feel free to visit our community forum. You can also subscribe to our newsletter to get any important announcements and releases.

Report bugs

Did you find a bug? please create an issue for it before starting any work on a pull request.

Support / Contact

Get in touch with us here. We are available for any type of support, queries or help at all times. Feel free to join our discussion forums as well!

  • Orangescrum Helpdesk https://www.helpdesk.orangescrum.com/
  • Contact Us https://www.orangescrum.com/contact/
  • Community Forum https://groups.google.com/g/orangescrum-community-support

About

Orangescrum open-source project management software is ideal for small teams or for individual usage.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907