Lucene search

K

CVE-2024-36399

🗓️ 06 Jun 2024 16:12:15Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

Kanboard Project Management Software CVE-2024-36399 fixed in version 1.2.37

Show more

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Related
Detection
Affected
Refs
Paths
Nvd
Vulnrichment
Node
kanboardkanboardRange<1.2.37
[
  {
    "vendor": "kanboard",
    "product": "kanboard",
    "versions": [
      {
        "version": "1.2.37",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
project_idrequest body/app/Controller/ProjectPermissionController.phpA lack of validation on the project_id parameter allows an attacker with 'Project Manager' role to add users to any project.CWE-639CWE-284CWE-285

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
06 Jun 2024 16:15Current
6.8Medium risk
Vulners AI Score6.8
CVSS36.3 - 8.2
EPSS0.00118
SSVC
48
.json
Report