High severity · published Dec 23, 2025
CVE-2021-47721
Orangescrum 1.8.0 Authenticated Privilege Escalation via User Session Manipulation
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
Orangescrum 1.8.0 contains a privilege escalation vulnerability that allows authenticated users to take over other project-assigned accounts by manipulating session cookies. Attackers can extract the victim's unique ID from the page source and replace their own session cookie to gain unauthorized access to another user's account.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OR
orangescrum · Orangescrum
1.8.0 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-47721
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-47721
Exploit
https://www.exploit-db.com/exploits/50551
Product
https://www.orangescrum.org/
Third Party Advisory
https://www.vulncheck.com/advisories/orangescrum-authenticated-privilege-escalation-via-user-session-manipulation
More from orangescrum
8.8
CVE-2023-0164
OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server
8.1
CVE-2023-0454
OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server
7.6
CVE-2023-1783
OrangeScrum version 2.0.11 allows an external attacker to remotely obtain AWS instance credentials
7.1
CVE-2021-47720
Orangescrum 1.8.0 Authenticated SQL Injection via Multiple Parameters
6.1
CVE-2023-0738
OrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the application