Skip to content
OpenAdvisories

Vendor

Axosoft

2 known vulnerabilities.

Products

Scrum and Bug Tracking 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-12249

    Axosoft Scrum and Bug Tracking Edit Ticket csv injection

    A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. The impacted element is an unknown function of the component Edit Ticket Page. Performing manipulation of the argument Title results in csv injection. It is possible to initiate the …

    Axosoft Scrum and Bug Tracking
  • Medium 5.5
    CVE-2025-11279

    Axosoft Scrum and Bug Tracking Add Work Item csv injection

    A vulnerability was detected in Axosoft Scrum and Bug Tracking 22.1.1.11545. This issue affects some unknown processing of the component Add Work Item Page. The manipulation of the argument Title results in csv injection. The attack can be launched remotely. …

    Axosoft Scrum and Bug Tracking