id: orangescrum-install info: name: Orangescrum Exposed Installation author: ritikchaddha severity: high description: Orangescrum is susceptible to the Installation page exposure due to misconfiguration. metadata: verified: true max-request: 1 shodan-query: title:"Orangescrum Setup Wizard" tags: misconfig,orangescrum,install http: - method: GET path: - "{{BaseURL}}" matchers-condition: and matchers: - type: word words: - 'Orangescrum Setup Wizard' - type: status status: - 200 # digest: 4b0a00483046022100e36721a4892737aa3749b1b9970cf00e6b0605905886136352703c672fa519b5022100e6b2f738351a15d804e3fc3d76f523fba679e89864d5a1cac6c342516cfae12a:922c64590222798bb761d5b6d8e72950