CVE-2025-52576

🗓️ 25 Jun 2025 16:46:01Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 21 Views

Kanboard before version 1.2.46 is vulnerable to username enumeration and brute-force protection bypass.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-52576	25 Jun 202518:06	–	circl
CNNVD	Kanboard 安全漏洞	25 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-52576 Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass	25 Jun 202516:46	–	cvelist
Debian CVE	CVE-2025-52576	25 Jun 202516:46	–	debiancve
EUVD	EUVD-2025-19116	3 Oct 202520:07	–	euvd
NVD	CVE-2025-52576	25 Jun 202517:15	–	nvd
OSV	CVE-2025-52576 Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass	25 Jun 202516:46	–	osv
OSV	DEBIAN-CVE-2025-52576	25 Jun 202517:15	–	osv
Positive Technologies	PT-2025-26861 · Kanboard · Kanboard	25 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-52576	27 Jun 202517:20	–	redhatcve

NVD

Vulners

Node

kanboard kanboardRange<1.2.46

[
  {
    "vendor": "kanboard",
    "product": "kanboard",
    "versions": [
      {
        "version": "< 1.2.46",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/kanboard/kanboard/commit/3079623640dc39f9c7b0c840d2a79095331051f1
github	www.github.com/kanboard/kanboard/blob/cbb7e60fb595ff4572bb8801b275a0b451c4bda0/app/Subscriber/AuthSubscriber.php
github	www.github.com/kanboard/kanboard/security/advisories/GHSA-qw57-7cx6-wvp7
github	www.github.com/kanboard/kanboard/blob/cbb7e60fb595ff4572bb8801b275a0b451c4bda0/app/Model/UserLockingModel.php

22 Aug 2025 18:23Current

7.1High risk

Vulners AI Score7.1

CVSS 3.15.3

EPSS0.00364

SSVC

CWE-203