Kagilum vulnerabilities
We track 2 vulnerabilities in Kagilum products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Kagilum vulnerabilities
- 8.8 High severity
Icescrum: Improper Limitation of a Pathname to a Restricted Directory
A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.
- 8.8 High severity
Icescrum: Improper Control of Generation of Code
A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.