Icescrum vulnerabilities

2 known vulnerabilities in Icescrum from Kagilum. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Icescrum: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-60786Dec 15, 2025Kagilum

  A Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploading a crafted Zip file.

• 8.8 High severity

  Icescrum: Improper Control of Generation of Code

  CVE-2025-60785Nov 3, 2025Kagilum

  A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page.