A critical privilege escalation vulnerability in Orangescrum 1.8.0 allows authenticated attackers to hijack user accounts, posing a severe risk to data confidentiality and integrity.

This vulnerability, identified as CWE-639 (Authorization Bypass Through User-Controlled Key), occurs when the application fails to properly validate session identifiers. An attacker with standard authenticated access can extract a victim's unique ID from the page source and replace their own session cookie, resulting in full unauthorized access to the victim's account.

The ability to perform account takeovers presents a significant threat to business operations. Successful exploitation allows an attacker to access sensitive project data, modify task information, or impersonate authorized personnel, potentially leading to unauthorized data exfiltration or internal sabotage. Given the CVSS score of 8.8, this vulnerability is classified as High severity due to the ease of exploitation and the total impact on confidentiality, integrity, and availability.

Immediate Action: Upgrade to the latest version of Orangescrum immediately to ensure the session management flaw is resolved.

Proactive Monitoring: Review application access logs for unusual session activity or multiple account logins originating from a single source IP address.

Compensating Controls: Implement strict network access controls and utilize a Web Application Firewall (WAF) to detect and block requests containing anomalous or manipulated session cookies.

Public Exploit Available: Yes, a functional proof-of-concept exploit is available via Exploit-DB (EDB-ID: 50551).

The presence of a public proof-of-concept exploit makes this vulnerability an immediate target for malicious actors. IT administrators should prioritize patching Orangescrum 1.8.0 to the latest available version without delay. If an immediate update is not feasible, restrict application access to trusted internal networks and monitor user sessions for signs of unauthorized account switching.