Lucene search

[email protected]CVE-2017-15209

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-15209

2022-10-0316:23:33

CWE-639

[email protected]

web.nvd.nist.gov

kanboard

cve-2017-15209

security vulnerability

authenticated user

attachment removal

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

In Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments from a private project of another user.

Affected configurations

NVD

Node

kanboardkanboardMatch1.0.0

kanboardkanboardMatch1.0.1

kanboardkanboardMatch1.0.2

kanboardkanboardMatch1.0.3

kanboardkanboardMatch1.0.4

kanboardkanboardMatch1.0.5

kanboardkanboardMatch1.0.6

kanboardkanboardMatch1.0.7

kanboardkanboardMatch1.0.8

kanboardkanboardMatch1.0.9

kanboardkanboardMatch1.0.10

kanboardkanboardMatch1.0.11

kanboardkanboardMatch1.0.12

kanboardkanboardMatch1.0.13

kanboardkanboardMatch1.0.14

kanboardkanboardMatch1.0.15

kanboardkanboardMatch1.0.16

kanboardkanboardMatch1.0.17

kanboardkanboardMatch1.0.18

kanboardkanboardMatch1.0.19

kanboardkanboardMatch1.0.20

kanboardkanboardMatch1.0.21

kanboardkanboardMatch1.0.22

kanboardkanboardMatch1.0.23

kanboardkanboardMatch1.0.24

kanboardkanboardMatch1.0.25

kanboardkanboardMatch1.0.26

kanboardkanboardMatch1.0.27

kanboardkanboardMatch1.0.28

kanboardkanboardMatch1.0.29

kanboardkanboardMatch1.0.30

kanboardkanboardMatch1.0.31

kanboardkanboardMatch1.0.31beta0

kanboardkanboardMatch1.0.31beta1

kanboardkanboardMatch1.0.32

kanboardkanboardMatch1.0.32beta0

kanboardkanboardMatch1.0.32beta1

kanboardkanboardMatch1.0.33

kanboardkanboardMatch1.0.34

kanboardkanboardMatch1.0.35

kanboardkanboardMatch1.0.36

kanboardkanboardMatch1.0.37

kanboardkanboardMatch1.0.38

kanboardkanboardMatch1.0.39

kanboardkanboardMatch1.0.40

kanboardkanboardMatch1.0.41

kanboardkanboardMatch1.0.42

kanboardkanboardMatch1.0.43

kanboardkanboardMatch1.0.44

kanboardkanboardMatch1.0.45

kanboardkanboardMatch1.0.46

CPENameOperatorVersion
kanboard:kanboardkanboardeq1.0.0
kanboard:kanboardkanboardeq1.0.1
kanboard:kanboardkanboardeq1.0.2
kanboard:kanboardkanboardeq1.0.3
kanboard:kanboardkanboardeq1.0.4
kanboard:kanboardkanboardeq1.0.5
kanboard:kanboardkanboardeq1.0.6
kanboard:kanboardkanboardeq1.0.7
kanboard:kanboardkanboardeq1.0.8
kanboard:kanboardkanboardeq1.0.9

CPE	Name	Operator	Version
kanboard:kanboard	kanboard	eq	1.0.0
kanboard:kanboard	kanboard	eq	1.0.1
kanboard:kanboard	kanboard	eq	1.0.2
kanboard:kanboard	kanboard	eq	1.0.3
kanboard:kanboard	kanboard	eq	1.0.4
kanboard:kanboard	kanboard	eq	1.0.5
kanboard:kanboard	kanboard	eq	1.0.6
kanboard:kanboard	kanboard	eq	1.0.7
kanboard:kanboard	kanboard	eq	1.0.8
kanboard:kanboard	kanboard	eq	1.0.9

Rows per page:

1-10 of 471

References

openwall.com/lists/oss-security/2017/10/04/9

github.com/kanboard/kanboard/commit/7100f6de8a1f566e260b3e65312767e4cde112b1

kanboard.net/news/version-1.0.47

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

4.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.9%

JSON

Related for CVE-2017-15209

cvelist1 osv1 prion1 nvd1 debiancve1